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(54) INFORMATION PROCESSING SYSTEM, INFORMATION PROCESSING METHOD AND 
INFORMATION PROCESSING DEVICE 

(57) Prior to data transmission, a protocol for per- 
forming mutual authentication and sharing a plurality of 
encryption keys is executed between a CPU 12 on the 
side ol a data transmission apparatus 10 and a CPU 22 
on the side of a data receiving apparatus 20. The data 
transmission apparatus 10 causes the CPU 12 to 
encrypt data requiring the assurance of a transmission 
band by a first encryption key and to transmit the data in 
a first transmission mode via an input/output interface 
16, and also to encrypt related data relating to the data 
by a second encryption key and to transmit the related 
data in a second transmission mode via the input/output 
interface 16. The data receiving apparatus 20 causes 
the CPU 22 to decode, by a first encryption key, the data 
requiring the assurance of a transmission band 
received in the first transmission mode via an input/out- 
put interface 24, and also to decode, by a second 
encryption key, the related data received in the second 
transmission mode via the input/output interface 24. 
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Description 
Technical Field 



[0001J This invention relates to an information 
processing system, an information processing method 
and an information processing apparatus for carrying 
out transmission of data via an interface having a first 
transmission mode in which a transmission band is 
ensured and a second transmission mode in which a 
transmission band is not ensured. 



or the like, the real-time property is not required in com- 
parison with the case of transmitting the music data 
itself. Therefore, it is possible to transmit the information 
by using a transmission method in which a transmission 
s band is not secured. In general, it is often desired to use 
the transmission method in which a transmission band 
» not secured, because the band of the entire transmis- 
sion line is not used. 

io Disclosure of the Invention 



Background Art 

[0002] Recently, for example, systems in which a 
plurality of AV apparatuses are connected via a digital 
interface at homes for transmitting and recording digital 
data such as music information, video information orthe 
like are becoming popular. 

[0003J For example, in an apparatus such as a 
video camera, a DVD player or the like having an inter- 
face of the IEEE (Institute of Eledrical and Electronics 
Engineers) 1394 high-performance serial bus (hereinaf- 
ter simply referred to as the IEEE 1394 serial bus) 
since data can be recorded with high fidelity, it is neces- 
sary to prevent data from being illegally copied 
[0004] For example, a key is stored indicating 
whether or not recording of movie information onto a 
magneto-opticaf disc apparatus is permitted, and by 
using this key, authentication is performed as to whether 
the magneto-optical disc apparatus is an authorized 
apparatus, that is, an apparatus which has received a 
license from the copyright holder. Thus, recording of the 
movie information onto only a magneto-optical disc 
apparatus which is authenticated as an authorized unit 
is pemirtted. In such a case, it is necessary to perform 
authentication of the counterpart apparatus between an 
apparatus on the side which transmits movie informa- 
tion (hereinafter referred to as a source) and an appara- 
tus on the side which receives the transmission 
(hereinafter referred to as a sink). 
[0005] For the purpose of protecting copyright in 
such a system, various authentication methods have 
been proposed. For an authentication protocol used for 
these authentication methods, an encryption algorithm 
is often used. 

[0006] Meanwhile, when transmitting music data 
between apparatuses, for example, if transmission is 
stopped during the transmission of the music data or if 
the quantity of data which can be transmitted is 
extremely reduced, it becomes impossible for the 
receiving side to obtain daia required for playback and 
the music might be interrupted. Therefore, it is neces- 
sary to transmit music data in a state where a band of a 
certain extent is secured. 

[0007] on the other hand, when transmitting infor- 
mation which is not music data itself but is related to 
music data, for example, lyrics, a photograph of an artist 



[0008] Thus, in view of the foregoing status of the 
art. it is an object of the present invention to provide an 
information processing system, an information process- 
's mg method and an information processing apparatus in 
which two types of transmission modes, that is a trans- 
mes.cn mode in which a transmission band is'secured 
and a transmission mode in which a transmission band 
b not secured, are employed so as to enable reliable 
20 transmission of data. 

[0009] (t is another object of the present invention to 
prov.de an information processing system, an informa- 
tion processing method and an information processing 
apparatus in which data requiring the assurance of a 
25 transmission band and related data relating to the data 
are encrypted by different encryption keys so as to ena- 
ble safe transmission. 

[0010] It is a further object of the present invention 
to provide an information processing system, an infor- 
30 mation processing method and an information process- 
ing apparatus which enable authentication of an 
information processing apparatus on a transmission 
side and an information processing apparatus on a 
recevmg side with respect to each other and which ena- 
35 we shanng of an encryption key. 

[0011] An information processing system according 
to the present invention comprises: a first information 
processing apparatus comprising an interface having a 
first transmission mode in which a transmission band is 
<o ensured and a second transmission mode in which a 
transmission band is not ensured, and transmission 
control means for encrypting data requiring the assur- 
ance of the transmission band by a first encryption key 
and then transmitting the data in the first transmission 
«s mode v.a the interface and for encrypting related data 
relahng to the data by a second encryption key and then 
transmitting the related data in the second transmission 
mode v.a the interface; and a second information 
processing apparatus comprising an interface having a 
so first transmission mode in which a transmission band is 
ensured and a second transmission mode in which a 
transm.ss.on band is not ensured, and receiving control 
means for decoding, by the first encryption key. the data 
requiring the assurance of the transmission band which 
55 e receded in the first transmission mode via the inter- 
face and for decoding, by the second encryption key, the 
related data received in the second transmission mode 
via the interface. 
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[0012] An information processing method accord- 
ing to the present invention is adapted for performing 
data transmission between a first information process- 
ing apparatus and a second information processing 
apparatus via an interlace having a first transmission 5 
mode in which a transmission band is ensured and a 
second transmission mode in which a transmission 
band is not ensured. The method comprises the steps 
of: encrypting data requiring the assurance of the trans- 
mission band from the first information processing 10 
apparatus by a first encryption key and then transmitting 
the data in the first transmission mode, while encrypting 
related data relating to the data by a second encryption 
key and then transmitting the related data in the second 
transmission mode; and decoding, by the first encryp- 15 
tion key on the side of the second information process- 
ing apparatus, the data requiring the assurance of the 
transmission band which is received in the first trans- 
mission mode, and decoding, by the second encryption 
key. the related data received in the second transmis- 20 
sion. 

[0013] Also, an information processing apparatus 
according to the present invention comprises: an inter- 
face having a first transmission mode in which a trans- 
mission band is ensured and a second transmission 25 
mode in which a transmission band is not ensured; and 
transmission control means for encrypting data requir- 
ing the assurance of the transmission band by a first 
encryption key and then transmitting the data in the first 
transmission mode via the interface and for encrypting 30 
related data relating to the data by a second encryption 
key and then transmitting the related data in the second 
transmission mode via the interface. 
[0014] Also, an information processing apparatus 
according to the present invention comprises: an inter- 35 
face having a first transmission mode in which a trans- 
mission band is ensured and a second transmission 
mode in which a transmission band is not ensured; and 
receiving control means for decoding, by a first encryp- 
tion key, the data requiring the assurance of the trans- <o 
mission band which is received in the first transmission 
mode via the interface and for decoding, by a second 
encryption key, the related data received in the second 
transmission mode via the interface. 

AS 

Brief Description of the Drawings 
[0015] 

Fig. 1 is a block diagram showing the overall con- 50 
struction of a digital satellite broadcast system 
including an AV system to which the present inven- 
tion is applied. 

Fig.2 is a block diagram showing the construction of 
a ground station in the digital satellite broadcast 55 
system. 

Fig.3 is a view showing data transmitted from the 
ground station. 



Rgs.4A to 4H are explanatory views showing the 
time-division multiplexing structure of transmission 
data. 

Fig. 5 is a block diagram showing the construction . 
of a data transmission system to which the present 
invention is applied. 

Fig.6 is an explanatory view schematically showing 
the structure of an IEEE 1 394 bus cable. 
Figs.7A to 7C are explanatory views schematically 
showing a signal transmission mode in IEEE 1394. 
Rg.8 is an explanatory view showing the overview 
of packet transmission in IEEE 1394. 
Rg.9 is a block diagram showing the construction of 
an essential portion of a data transmission appara- 
tus in the data transmission system. 
Fig. 10 is a flowchart showing the operation of the 
data transmission apparatus. 
Fig. 1 1 is a flowchart showing the procedure of data 
transmission in the data transmission system. 
Fig. 12 is a flowchart showing the processing proce- 
dure on the data transmission apparatus side in the 
data transmission system. 

Fig. 13 is a flowchart showing the processing proce- 
dure on the data receiving apparatus side in the 
data transmission system. 
Rg.14 is a flowchart showing another procedure of 
data transmission in the data transmission system. 
Rg.15 is a flowchart showing another processing 
procedure on the data transmission apparatus side 
in the data transmission system. 
Fig. 16 is a flowchart showing another processing 
procedure on the data receiving apparatus side in 
the data transmission system. 

Best Mode for Carrying Out the Invention 

[0016] Preferred embodiments of the present inven- 
tion will now be described with reference to the draw- 
ings. 

[0017] The present invention is applicable to a data 
transmission system (AV system) in which electronic 
apparatuses such as various types of digital AV (audio- 
visual) apparatuses, personal computer units and the 
like are interconnected via, for example, the IEEE (Insti- 
tute of Electrical and Electronics Engineers) 1394 bus 
so that data can be transmitted and received among the 
apparatuses. In this AV system, a construction is 
adopted which enables reception of digital satellite 
broadcast and downloading of the received data. 
[0018] The overall construction of the digital satel- 
lite broadcast system including this AV system is shown 
in Fig. 1 . 

[0019] In the digital satellite broadcast system 
shown in Fig. 1 , materials for television program broad- 
cast from a TV program material server 106, materials 
for music data from a music material server 1 07, sound 
addition information from a sound-addition-information 
server 1 08, and GUI (graphical user interface) data from 
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a GUI data server 109 are sent to a ground station 101 
for digital satellite broadcast. 

[0020J The TV program material server 106 is a 
server for providing materials for a norma* broadcast 
program. Materials for music broadcast sent from the 
TV program material server are contain dynamic 
images and sounds. For example, if the program is a 
music broadcast program, dynamic images and sounds 
for promotion of a new music piece are broadcast by 
using the materials of the dynamic images and sounds 
of the TV program material server 1 06. 
[0021 J The music material server 107 is a server for 
providing an audio program by using an audio channel. 
Materials for this audio program consist of sounds onry. 
The music material server 107 transmits the materials 
of the audio program of a plurality of audio channels to 
the ground station 101. 

[0022] In program broadcast of each audio channel, 
the same music piece is broadcast repeatedly for a pre- 
determined unit time. Each of the audio channels is 
independent of the others and various methods can be 
conceived for the use thereof. For example, in one audio 
channel, several pieces of the latest Japanese pop 
music are repeatedly broadcast for a particular fixed 
time period, and in another channel, several pieces of 
the latest pop music abroad are repeatedly broadcast 
for a particular fixed time period. 
[0023] The sound-addition- information server 108 
is a server for providing time information or the like of a 
music piece outputted from the music material server 
107. 

[0024J The GUI data server 109 provides "GUI 
data" for forming a GUI screen used by a user for an 
operation. For example, if the screen is a GUI screen for 
downloading a music piece, as will be later described 
the GUI data server 109 provides image data for form- 
ing a page of a list of music pieces to be distributed and 
an information page for each music piece, text data, and 
a still picture of the album jacket. Furthermore, EPG 
(electrical program guide) data used to display a pro- 
gram list, which is called EPG, on the AV system 103 
side is also provided from here. 
[0025] For the "GUI data", for example, an MHEG 
(Multimedia Hypermedia Information Coding Experts 
Group) system is employed. MHEG is an international 
standard for description of a scenario, for recognizing 
multimedia information, procedure, operation and the 
combination thereof as objects, then coding these 
objects, and producing a title (e.g., GUI screen). In this 
digital satellite broadcast system, MHEG-5 is employed. 
[0026] The ground station 101 multiplexes the infor- 
mation transmitted from the TV program material server 
106, the music material server 107, the sound-addition- 
mformation server 108 and the GUI data server 109 
and transmits it. 

[0027] in this digital satellite broadcast system the 
video cfata transmitted from the TV program material 
server 106 is compressed and coded by the MPEG 



(Moving Picture Experts Group) 2 system, and audio 
data is compressed and coded by the MPEG2 audio 
system. The audio data transmitted from the music 
material server 107 is compressed and coded for 
5 example, by either the MPEG2 audio system or the 
ATRAC (Adaptive Transform Acoustic Coding) system 
corresponding to each audio channel. 
[0028] in multiplexing these data, the data are 
encrypted by using key information from a key informa- 
io tion server no. 

[0029] A signal from the ground station 101 is 
received by a receiving equipment (hereinafter also 
referred to as AV system) 1 03 at each home via a satel- 
lite 102. A plurality of transponders are mounted in the 
15 satellite 1 02. One transponder has a transmission capa- 
bility of, for example, 30 Mbps. The AV system 103 of 
each home has an IRD (integrated receiver decoder) 
1 1 2 connected to a parabolic antenna 1 1 1 , and also has 
a monitor unit 1 14 and an MD recorder/player 1 which 
20 are connected to the IRD 1 12. The AV system 103 also 
has a remote controller 64 for performing an operation 
»n the IRD 112, and a remote controller 32 for perform- 
ing an operation in the MD recorder/player 1 . 
[0030] In this AV system 103, a signal which is 
25 broadcasted via the satellite 1 02 is received by the par- 
abolic antenna 1 1 1 . This received signal is converted to 
a predetermined frequency by an LNB (low noise block 
down-converter) 115 mounted in the parabolic antenna 
111 and is supplied to the IRD 1 12. 
30 [0031] As a basic operation in the IRD 1 12, a signal 
of a predetermined channel is selected from the 
received signal, demodulation of video data and audio 
data as a program is performed from the channel- 
selected signal, and the resulting signals are outputted 
35 as a video signal and an audio signal. Also, in the IRD 
112, output as a GUI screen is. performed on the basis 
of the GUI data which is multiplexed and transmitted 
together with data as a program. Such output of the IRD 
112 is supplied to, for example, the monitor unit 114 
40 Thus, in the monitor unit 1 1 4, display of the image and 
output of the sound of the program which is received 
and channel-selected by the IRD 112 are performed 
and it becomes possible to display the GUI screen in 
accordance with the operation by the user. 
^5 [0032] The MD recorder/player 1 is a recording and 
playback apparatus capable of recording audio data 
onto and play back audio data from a loaded mini-disc 
Also, this MD recorder/player 1 is capable of recording 
audio data (music data) and still image data (picture file) 
so such as an album jacket associated with the audio data 
and text data (text file) such as lyrics, liner notes and the 
like onto a disc, and is capable of playing back and out- 
putting the recorded data of the picture file, the text file 
and the like in synchronization with the playback time of 
55 the audio data. 

[0033J The data of the picture file, the text file and 
the like appended to the audio data is also called *AUX 
data* as a matter of convenience in accordance with the 
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handling in the MD recorder/player 1, as will be 
described later. 

[0034] In the AV system 103, it is assumed that the 
IRD 112 and the MD recorder/player 1 are intercon- 
nected by an IEEE 1394 bus 116. 
[0035] In short, each ot the IRD 112 and the MD 
recorder/player 1 constituting the AV system 103 has a 
data interface conforming to the IEEE 1394 standard as 
the data transmission standard. 
[0036] Thus, in this AV system, the audio data 
(downloaded data) as a music piece received by the 
IRD 112 can be directly inputted and recorded as it 
remains compressed by the ATRAC system. Also, the 
AUX data uploaded together with the audio data to the 
satellite from the transmission side can be downloaded 
and recorded onto the MD recorder via the IRD 112 
from the satellite. 

[0037] The IRD 112 is capable of communicating 
with an accounting server 105 via a telephone line 104. 
An IC card on which various types of information is 
stored is inserted into the IRD 1 12. Then, for example, if 
audio data of a music piece is downloaded, history infor- 
mation regarding this is stored onto the IC card. The 
information on this IC card is sent to the accounting 
server 105 at a predetermined opportunity and timing 
via the telephone line 104. The accounting server 105 
performs accounting by setting the amount in accord- 
ance with the received history information and thus 
charges the user. 

[0038] As can be understood from the foregoing 
description, in the digital satellite broadcast system 
including the AV system to which the present invention 
is applied, the ground station 101 multiplexes the video 
data and audio data, which are materials for music pro- 
gram broadcast from the TV program material server 
106, the audio data, which are materials for the audio 
channel from the music material server 1 07, the sound 
data from the sound-addition-information server 108, 
and the GUI data from the GUI data server 109, and 
then transmits the multiplexed data. 
[0039] When this broadcast is received by the AV 
system 1 03 at each home, it is possible to view the pro- 
gram of the selected channel, for example, by using the 
monitor unit 1 14. Also, as the GUI screen using the GUI 
data transmitted together with the data of the program, 
an EPG (electrical program guide) screen may be dis- 
played so that retrieval of a program or the like can be 
performed. By performing a required operation using 
the GUI screen for specific services other than the nor- 
mal program broadcast, services other than viewing of a 
normal program provided "m the broadcast system can 
be enjoyed. 

[0040] For example, if the GUI screen for the down- 
loading service of audio (music piece) data is displayed 
and an operation is performed using this GUI screen, it 
is possible to download the audio data of the music 
piece requested by the user and to record and save it 
onto a disc by using the MDC recorder/player 1 . 



[0041] In this digital satellite broadcast system, 
when performing transmission from the ground station 
101 to the AV system 103 via the satellite 102, the DSM- 
CC (Digital Storage Media-Command and Control) pro- 
5 tocol is employed. 

[0042] The DSM-CC (MPEG-part6) system, as is 
already known, defines commands and a control 
method tor retrieving an MPEG coded bit stream stored 
on a digital storage medium (DSM) or storing a stream 

to on a DSM via a certain network. 

[0043] In order to transmit contents (a set of 
objects) of a data broadcast service (e.g., the GUI 
screen) by the DSM-CC system, it is necessary to 
define the description format of the contents in advance. 

15 In this digital satellite broadcast system, the above- 
described MHEG is employed as the definition of the 
description format of the contents. 
[0044] The ground station 101 in this digital satellite 
broadcast system is constituted as shown in Fig.2. 

20 [0045] In the ground station 101 shown in Fig.2, a 
TV program material entry system 131 registers the 
material data obtained from the TV program material 
server 106 to an AV server 135. The material data is 
sent to a TV program sending system 139, whereby the 

25 video data is compressed, for example, in accordance 
with the MPEG2 system, and whereby the audio data is 
divided into packets, for example, in accordance with 
the MPEG2 audio system. The output of the TV pro- 
gram sending system 139 is sent to a multiplexer 145. 

30 [0046] In a music material entry system 132, the 
material data from the music material server 107, that 
is, the audio data, is supplied to an MPEG2 audio 
encoder 136A and an ATRAC encoder 136B. The 
MPEG2 audio encoder 136A and the ATRAC encoder 

35 136B perform encoding processing (compression cod- 
ing) on the supplied audio data and then register the 
encoded audio data to an MPEG audio server 140A and 
an ATRAC audio server 140B, respectively. 
[0047] The MPEG audio data registered to the 

40 MPEG audio server 140A is transmitted to an MPEG 
audio sending system 143A, whereby the data is 
tfrvided into packets and then transmitted to the multi- 
plexer 145. The ATRAC data registered to the ATRAC 
audio server 140B is sent as 4X-speed ATRAC data to 

45 an ATRAC audio sending system 143B, whereby the 
data is divided into packets and sent to the multiplexer 
145. 

[0048] In a sound-addrtion-information entry sys- 
tem 133, the sound addition information, which is the 

so material data from the sound-addrtion-information 
server 108, is registered to a sound-addition-informa- 
tion database 1 37. The sound addition information reg- 
istered to the sound-addition-information database 137 
is transmitted to a sound-addrtion-information sending 

55 system 141 , whereby the information is similarly divided 
into packets and transmitted to the multiplexer 145. 
[0049] In a material-for-GUI entry system 134, the 
GUI data, which is the material data from the GUI data 
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sever 109. is registered to a GUI material database 
[0050] The GUI material data registered to the GUI 

ZIZTT ? is ,ransmitted 10 a GU| ^ 

system 142. whereby processing is performed so that 

J0051J Specifically, for example, in the case of a 
GUI screen for downloading a music piece the data 
ransmmed to the GU, authoring system 142 ma" 
mage data of the album jacket, text data such as lyriS 

[0052] Each of the above-described data is so- 
ca..ed monomedia. Ir, the GU, authoring system i£ 
the monomedia data is coded by using an mhS 

[0053J Then, the contents of MHEG-5 are produced 
^ether wrth a scenario description «, e (scrip ) S 
tht a h ■ re ' a,i0n °' ' he ab — entionid objecu so 
mode o,tn y °' GUI SCree " - » Cu 

zzzzzzr* - - 

Spfc'TT !" d S ° Und da,a < MPEG data 
and MPEG aud.o data) based on the material data of 

^Crr eria, SerVer 106 ' a " d MPEG ° 

o~r e f ; a, I da,a ° f me music 

a text data fit* Th» ^ a9es as ob ecls - ■"<« 

Pixels c^I?^^ " ^ 0,640X480 
JPPr / 1«: ♦ D w sample, m accordance with the 

i^^ZSE? Experts G ™ p >^-. £ 

charaSet ' " 0t m0re ,ha " 800 

the°GU. auT 6 daa °' ^ MHEG COn,en,s ° b «ained by 
CC e^iT ^ M2 iS *— — to a «** 
[0058] |„ ,he DSM^CC encoder 144 the data « 

audio data h * - 

then is divided into oar*^ J_! EG2 ' om,a t. and 
multiplexer iS Wf " Ch 0utpuned «• 
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[0059] m , he multiplexer 145 : the video packets and 
aud.o packets from the TV nrooram J « 
139, the audio packets from 
system ,43A, the 4X-speed audio packets fro "t 9 
5 ATRAC audio sending system U^ZtuZT 
^-information packets from the sound adZnlS' 
mauon sending system 14!. and the GU. data oacIeK 
;the GUI authoring system ,42 are rnSpfexed on 
he une base and are encrypted in accordance She 
10 *Z ; n,Wmafon ° U «P"' *"» «»e key informal 

^^n~^ 
time noint n i~ ~ *- 9 ' he P art fr0m a 

* ^ erem * a u "« to changing the lineup ofl p u JS 
SETS m d ^ 3 °' 30 --tes " o 
10062? a h ^ °' 3 Channe ' °' a »«* W« 

bmadcastTe^nt nsc S b SinT * * 

= m are ^ image r a ^r ,hs nofma ' 

* [0063] As MPEG audio channels (,) , 0 , m (or 
example. 10 channels of channels CH .0 CHio are 

[0064J | n other ^ . 
then transmmed, as shown in Rgs.4A to 40. SSS 
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structed by using the header information of each packet 
inside the I RD 1 12, as shown in Figs.4E to 4H. 
[0065] Fig. 5 is a block diagram showing the con- 
struction of a data transmission system according to the 
present invention. 5 
[0066] The data transmission system constitutes 
the AV system 1 03 induded in the above-described dig- 
ital satellite broadcast system, and has a data transmis- 
sion apparatus 10 functioning as the IRD 112 and a 
data receiving apparatus 20 functioning as the MD to 
recorder/player 1. The data transmission apparatus 10 
and the data receiving apparatus 20 are connected with 
each other via a transmission line 30. 
[0067] In this data transmission system, the data 
transmission apparatus 1 0 is a set top box, that is, the 15 
IRD 112, for receiving a satellite digital multi-channel 
broadcast program sent from a communication satellite, 
and is constituted by a central processing unit (CPU) 12 
connected to an internal bus 11, a memory 13, an input 
interface 14, a user interface 15, and an input/output 20 
interface 16. A satellite antenna 115 is connected to the 
input interface 14. The input/output interface 16 is an 
IEEE (the Institute of Electrical and Electronics Engi- 
neers) 1394 high-performance serial bus interlace 
(hereinafter simply referred to as the IEEE 1394 inter- 25 
face), which is a digital interface, and is connected to 
the transmission line 30 made of an IEEE 1394 bus. 
[0068] In this data transmission apparatus 10, the 
CPU 12 operates in accordance with control programs 
stored in the memory 13 and performs various types of 30 
control operations such as a channel selection opera- 
tion of a program in response to the operation informa- 
tion inputted via the user interface 1 5. 
[0069] Then, the data transmission apparatus 10 
selects a desired channel of the satellite digital mufti- 35 
channel broadcast program signal by the input interlace 
14 to which the receiving antenna 115 is connected, 
then receives the contents (music data) and meta-data 
(related data such as text data and JPEG data) of the 
desired channel, and transmits the received music data 40 
and meta-data (related data) to the transmission line 30 
from the input/output interface 16. 
[0070] The data receiving apparatus 20 is a record- 
ing/playback apparatus for recording/playing back the 
contents (music data) and meta-data (related data) 45 
received by the data transmission apparatus 1 0, that is, 
the set top box, via a recording medium such as a mag- 
netic tape or a magneto-optical disc. The data receiving 
apparatus 20 is constituted by a central processing unit 
22 connected to an interface bus 21, a memory 23, an 50 
input/output interface 24, a user interface 25, and a 
media access section 26. The input/output interface 24 
is an IEEE (the Institute of Electrical and Electronics 
Engineers) 1394 high-performance serial bus interface 
(hereinafter simply referred to as the IEEE 1394 inter- 55 
face), which is a digital interface, and is connected with 
the transmission line 30 made of the IEEE 1394 bus. 
[0071] Rg.6 shows an exemplary structure of an 
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IEEE 1394 bus cable which is actually used as the 
transmission line 30. 

[0072] In the case shown in Rg.6, connectors 600A 
and 600B are connected to each other via a cable 601 , 
• and six pins of pin numbers 1 to 6 are used as pin termi- 
nals of the connectors 600A and 600B. 
[0073] For the pint terminals provided in the con- 
nectors 600A and 600B, the pin number 1 is assigned to 
a power source (VP), the pin number 2 is assigned to 
the ground (VG), the pin number 3 is assigned to TPB1, 
the pin number 4 is assigned to TPB2, the pin number 5 
is assigned to TPA1 , and the pin number 6 is assigned 
to TPA2. 

[0074] The connection mode of the pins between 
the connectors 600A and 600B is as follows. 

pin number 1 (VP) - pin number 1 (VP) 
pin number 2 (VG) - pin number 2 (VG) 
pin number 3 (TPB1) - pin number 5 (TPA1) 
pin number 4 (TPB2) - pin number 6 (TPA2) 
pin number 5 (TPA1 ) - pin number 3 (TPB1 ) 
pin number 6 (TPA2) - pin number 4 (TPB2) 

Among these sets of pin connections, the following set 
of two twisted wires forms a signal line 601 A which 
mutually transmits a signal in a differential manner. 

pin number 3 (TPB1 ) - pin number 5 (TPA1 ) 
pin number 4 (TPB2) - pin number 6 (TPA2) 

Also, the following set of two twisted wires forms a sig- 
nal fine 601 B which mutually transmits a signal in a dif- 
ferential manner. 

pin number 5 (TPA1) - pin number 3 (TPB1) 

pin number 6 (TPA2) - pin number 4 (TPB2) 

[0075] The signals transmitted by the two sets of 
the signal line 601 A and the signal line 601 B are a data 
signal (Data) shown in Fig.7A and a strobe signal 
(Strobe) shown in Fig.7B. 

[0076] The data signal shown in Fig.7A is outputted 
fromTPBl or TPB2 by using one of the signal tine 601 A 
and the signal line 601 B and is inputted to TPA1 or 
TPA2. 

[0077] The strobe signal shown in Fig.7B is a signal 
obtained by performing predetermined logical operation 
with respect to the data signal and a transmission clock 
synchronized with the data signal, and has a frequency 
lower than that of the actual transmission dock. This 
strobe signal is outputted from TPA1 or TPA2 by using 
the other signal line that is not used tor data signal 
transmission, of the signal line 601 A and the signal line 
601 B, and is inputted to TPB1 or TPB2. 
[0078] For example, if it is assumed that the data 
signal and the strobe signal shown in Figs.7A and 7B 
are inputted to a particular IEEE 1394 -compatible 
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equipment, this equipment performs predetermined loo- 
ical operation on the inputted data signal and strobe sig- 
nal, thus generates a transmission clock (Clock) as 
shown in Fig. 7C . and uses it lor required input data sig- 
nal processing. y 

f 0079J (n accordance with the IEEE 1 394 standard * 
by adopting such a hardware-related data transmission 
mode the need to transmit a transmfcsion clock ol a fast 
cycle between equipments by means of a cable is elim- 

ZZeT ^ °' Si9na ' tranSmtesi0 " te » 

[0080] Although the specification of six pins is 
employed in the above description, there is afeo the 
spec, cation of four pins in accordance with the IEEE 
1394 formal, consisting of only the signal line 601A and , 5 
the s,gnal l,ne 601B , which are two sets of twisted 
w,es w*h the power source (VP) and .he ground (VG) 
om,ned. For example, the MD recorder/p.ayer , in this 
AV s ystem 103 „ actua(|y cQnfjgured h s 

that a s,mp.er system can be provided for the user by 20 
os,ng a cable of the four-pin specification * 
[0081] 'n accordance with the IEEE 1394 standard 
a transrmssion operation performed within the network 
connected via the IEEE 1394 bus is cal.ed a subact 
and the lol.ow.ng two types ol subactions are defined 2s 
That as the two subactions. an asynchronous tans 
™ mode «"* "asynchronous data transferor 
carrying ou. normal data transmission, and a synchm 
nous transmission mode called '^oloTZ 

M 3 «» •« * ensured, ale » 

5EL rf S Pf cifica '^ in accordance with the IEEE 
1394 ^standard, transmission is carried out by repeating 
1 e K oc ronous cycle (nominal cycle) as shol, in 

uSc wh S ^ fe ° Chr0n0US is « as 125 as 
usee. wh,ch corresponds to 100 MHZ as a band It is 

125 usee. For each .sochronous cycle, the data is 
divded m.o packets and then transmit 
[0083] A cycle start packet indicating the start of ,o 
one isochronous cycle is located a, the leading pa* 0 
this isochronous cycle. 9 P 

[0084] The generation timing ol this cvcIp <*m 

m F T ork sys,em de,inedas a c * cle «-r « 

[0085] Fo , owl ng the cycle start pa£ *et, an bo- 

2J" k ' SOChronous is divided into packets for 
each and tnese are arranged ^ PJJ £ 

>n a t.me-d,v B ,on manner (isochronous subactions) A *, 
Pause period (for example. 0.05 usee) called an L 

£££££ pm T d ,or ,he * 

packet inside the isochronous subactions 

!fTf 6 L„ manner 38 described above, in the 
EEE 1394 system, it is possible to transmit and recet * 
isochronous data on mu.uple channels by one * 

[0087] For example, in the case of transmission ol 
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ATRAC data (compressed audio data) with which the 
MD recorder/player , in (his AV system'is compare by 

IihaTZT ^ ° n ,he that the 

ATRAC data has a 1X-speed transfer rate of 1 4 Mbos 
hme-series-like continuity (reaMime pmpelT B 
secured I, ATRAC data of at leas, around 2u aSeral 

[0088J For example, when a particular equipment 
^nsm-s ATRAC data - a request for a size SEE 
chronous packet that is sufficient ,0 secure reaMime 
jnsmission 0, the ATRAC data is made ,0 an ,RM Lo 
chronous resource manager) inside the IEEE 1394 net 
work system. In the IRM. me cunen, data 

If oeZ ^ "^-n-permission is 
ATRAC dai T 0 " 13 9 ' Ven ' * 13 P0SSib,e to divid * the 
.hlm K *? V 0 ,Sochronou « Packets and transmit 
them by the de S1 gnated channel. Ths i s what is calted 
band reservation in the IEEE 1394 interface 

[0089] By using the remaining band which is not 
used by the isochronous s(jbac( . ons . n ,s jo. 

ZZTZT e - , T mission °' asynct ~ ^ 

[0090, r' ' IT*™™ PSCkeK fe P erfo ™ d 
[0090] F,g. 8 shows an example in which two asvn 

chronous packets of packet A and packet E I aTZc 

2fJ5Sr ^r-ronour P al?a e S i 
p e ri o d o? " < ac ^ 0 ^dge) is appended with a pause 

them ACK is T ( ° ° 5 ^ pr0Vided ^en 
mem ACK is a s.gnal outputted from the receiving side 

Parget) ,n a hardware-like manner in order to inform ,h e 
transm.s SI on side (Controller) thai a certain Z of 
asynchronous data has been rice^d inTe pro S 0 
asynchronous transaction. 

[0091] A pause period called a subaction oao of 
daTaTn!? ■ ° '* ^ a ^Tthe 

P a?ke TZ7™Zr* ^ UP ° f an synchronous 
pacKet and ACK followtng this packet 

Ss and ^v* 3 * b ' ranSmined * ^onous 

Sc i X 1,3,3 fite WhiCh iS a PP ended to the 
ATRAC data is transmitted by asynchronous packets it 

ai rac data and te AUX data file 
[0093] Asynchronous transmission is one-to-one 
umcas, transmission and has a property such tha inter 
cepuon mereof fe M in ^ 

tr;m2ior smission ,or ^ 

[0094] m this data transmission system, music data 

whLhT ^ fe0Chr ° n0us tn.nsmission t 

which a transmission band can be secured, and re.ated 

33T" 15 ,ransmitted ^ usin9 asynchronous 

[0095] The data receiving apparatus 20 receives 

Zc? 2 a 4 a i? ,ed . in r a,ion v,a the inp ^ 

a^Te^oSh 1 , h S ' C ^ re ' a,ed in,0TOa ««>" 
are recordable, these are recorded on a reconfirm 

m,d«m such as a magneto tepe or a magna 

else as desenbed above by the media acLs section 
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26. 

[0096] The music data and the related information 
recorded on the recording medium are reproduced by 
the media access section 26. The music data is con- 
verted into an analog signal and is outputted from an 
analog audio output terminal 26A. The related informa- 
tion is outputted from a video output terminal 26B. Also, 
the music data and the related information reproduced 
by the media access section 26 may be transmitted to 
another equipment via the IEEE 1394 interface. 
[0097) When the data receiving apparatus 20 
receives music data the recording of which is prohibited, 
the data receiving apparatus 20 simply converts the 
music data into an analog signal without recording the 
music data on a recording medium by media access 
section 26, and outputs the signal from the analog audio 
output terminal 26A. 

[0098] In this data receiving apparatus 20, the CPU 
22 operates in accordance with control programs stored 
in the memory 23 so that various types of control oper- 
ations such as a recording operation by the media 
access section 26 are performed in accordance with 
operation information which is inputted via the user 
interface 25. 

[0099J In this data transmission system, the con- 
tents (music data) and meta-data (related data, that is, 
text data, JPEG data and the like) of a desired channel 
received by the data transmission apparatus 10 via the 
receiving antenna 115 are encrypted by different 
encryption methods and encryption keys, and are trans- 
mitted to the data receiving apparatus 20. 
[0100] Specifically, as shown in Fig.9, which shows 
the construction of an essential portion of the data 
transmission 10, the input interface 14 of the data trans- 
mission apparatus 10 has a demultiplexer (DEMUX) 
14A tor selecting a desired channel of a satellite digital 
multi-channel broadcast signal, and a decoder (DEC) 
14B for decoding a transport stream of a desired chan- 
nel selected by the demultiplexer (DEMUX) 14A. The 
input/output interface 16 has a data separation circuit 
16A for separating the contents (music data) and meta- 
data (related data such as text data and JPEG data) 
contained in the transport stream of a desired channel 
decoded by the decoder (DEC) 14B, a first encoder 16B 
for encrypting the contents (music data) separated by 
the data separation circuit 16A using an encryption key 
Kiso by a first encryption method and thus creating iso- 
chronous packets, and a second encoder 16C for 
encrypting the meta-data (related data) separated by 
the data separation circuit 16A using an encryption key 
Kasync by a second encryption method and thus creat- 
ing asynchronous packets. 

[0101] The input/output interface 16 in the data 
transmission apparatus 10 is controlled by the CPU 12 
and operates as shown in the flowchart of Fig. 10. That 
is, when a transport stream of a desired channel 
received via the input interlace 14 is inputted (step Si), 
the input/output interface 16 determines whether the 



data contained in the inputted transport stream is the 
contents (music data) or meta-data (related data) (step 
S2). When the data is the contents (music data), the 
contents (music data) are encrypted using an encryp- 
5 tion key Kiso by a first encryption method (step S3), and 
a process for transmitting the contents (music data) 
encrypted by the first encryption method as iso- 
chronous packets is performed (step S4). When the 
data contained in the inputted transport stream is the 
w meta-data (related data), the meta-data (related data) is 
encrypted using an encryption key Kasync by a second 
encryption method (step S5), and a process for trans- 
mitting the meta-data (related data) encrypted by the 
second encryption method as asynchronous packets is 
is performed (step S6). 

[0102] In this data transmission system, prior to the 
data transmission, a protocol for performing mutual 
authentication and for sharing two types of encryption 
keys for isochronous and asynchronous transmission is 

20 performed between the data transmission apparatus 1 0 
and the data receiving apparatus 20. Specifically, after 
the authentication and key sharing protocol as shown in 
the flowchart of Fig. 1 1 is performed, data is transmis- 
sion is carried out. The processing procedure on the 

25 data transmission apparatus 10 side in this data trans- 
mission system is shown in the flowchart of Fig. 12, and 
the processing procedure on the data receiving appara- 
tus 20 side is shown in the flowchart of Fig. 13. 
[0103] In Fig.1 1 showing the authentication and key 

30 sharing protocol, the data transmission apparatus 1 0 is 
shown as a source device A, and the data receiving 
apparatus 20 is shown as a sink device B. These appa- 
ratuses are given information Kv indicating the validity 
of themselves at the time of manufacture, and hold this 

35 information in secret. 

[0104] In this data transmission system, the CPU 
l2ofthe data transmission apparatus 10, that is, the set 
top box, first transmits a start command for starting the 
transmission of data from the input/output interface 16 

40 to the data receiving apparatus 20 via the transmission 
line 30 (step S10). 

[01 05] After the CPU 22 of the data receiving appa- 
ratus 20, that is, the recording apparatus, receives the 
start command (START command) sent from the data 

45 transmission apparatus 10 via the transmission line 30 
connected to the input/output interface 24 (step S20), 
the CPU 22 generates a request for starting the authen- 
tication and key sharing protocol (Request authentica- 
tion) and two random numbers Bnl and Bn2 of m (e.g., 

so m = 64) bits and transmits them to the data transmission 
apparatus 10 via the input/output interface 24 (step 
S21). 

[0106] After the CPU 12 of the data transmission 
apparatus 10 receives the request for starting the 
55 authentication and key sharing protocol (Request 
authentication) and the two random numbers Bn1 and 
Bn2 sent from the data receiving apparatus 20 via the 
transmission line 30 connected to the input/output inter- 
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number Bn2 sent to the data transmission apparatus 1 0 
at step S21, and inputs this concatenated data (Kv||An28 
Bn2) to a hash function Hashf J. 

R'2 = Hash[KvfiAn2BBn2] msb_m 5 

The CPU 22 then sets the most significant m bits of the 
output thereof as reference data R'2 (step S25). That is, 
the same m bits as the response data R2 are caused to 
be the reference data R'2. w 
[0116) Then, the CPU 22 of the data receiving 
apparatus 20 compares the reference data R'2 with the 
response data R2 received at step S23 (step S26). II the 
response data R2 does not match the reference data 
R'2 at this step S26, the CPU 22 of the data receiving 75 
apparatus 20 determines that the data transmission 
apparatus 1 0 is an unauthorized apparatus, and termi- 
nates the authentication and key sharing protocol. 
[0117] When the response data R2 matches the 
reference data R'2 at step S26, the CPU 22 of the data 20 
receiving apparatus 20 determines that the data trans- 
mission apparatus 10 is an authorized apparatus, and 
inputs the concatenated data (KyflAn1||Bn1) formed by 
concatenating the information Kv indicating the validity 
of the apparatus itself, the random number Anl 25 
received at step S22 and the random number Bn1 sent 
to the data transmission apparatus 10 at step aS21 to a 
hash function Hash[ J. 



K'iso = Hash[Kv|An1(jBn1) lsb_m 
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The CPU 22 then sets the least significant m bits of the 
output thereof as an encryption key K'iso to be used to 
decode the data transmitted by isochronous transmis- 
sion. That is, the same m bits as the encryption key Kiso 35 
are caused to be the encryption key K'iso. 
[0118] The CPU 22 also inputs the concatenated 
data (KvjjAn2|lBn2) formed by concatenating the infor- 
mation Kv indicating the validity of the apparatus itself, 
the random number An2 received at step S22 and the 40 
random number Bn2 sent to the data transmission 
apparatus 10 at step S21 to a hash function Hashf J. 



K'async = Hash[KvflAn2|)Bn2] lsb_m 
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The CPU 22 then sets the least significant m bits of the 
output thereof as an encryption key K'async to be used 
to decode the data transmitted by asynchronous trans- 
mission (step S27). That is, the same rn bits as the 
encryption key Kasync are caused to be the encryption 50 
key K'async. 

[0119] In this data transmission system, prior to 
data transmission, the authentication and key sharing 
protocol is performed by asynchronous transmission of 
IEEE 1394 between the data transmission apparatus 1 0 55 
and the data receiving apparatus 20. Thus, the data 
transmission apparatus 10 and the data receiving appa- 
ratus 20 can authenticate the validity of each other and 



can share the encryption key for transmitting encrypted 
data by isochronous transmission and the encryption 
key for transmitting encrypted data by asynchronous 
transmission. 

[0120] Also, in this data transmission system, after 
the authentication and key sharing protocol is executed, 
the music data from the data transmission apparatus 10 
is encrypted using the encryption key Kiso and transmit- 
ted by isochronous transmission, and the related data is 
encrypted using the encryption key Kasync and trans- 
mitted by asynchronous transmission (step S18). The 
data receiving apparatus 20 decodes the music data 
transmitted by isochronous transmission, using the 
encryption key K'iso, and decodes the related data 
transmitted by asynchronous transmission, using the 
encryption key K'async (step S28). 
[01 21 ] That is, after the execution of the authentica- 
tion and key sharing protocol, the data receiving appa- 
ratus 20 decodes the music data sent by isochronous 
transmission from the data transmission apparatus 10, 
by using the encryption key K'iso, and decodes the 
related data sent by asynchronous transmission, by 
using the encryption key K'async, so that the respective 
plain text data can be obtained. [Another Example of 
Authentication and Key Sharing Protocol] 
[0122] Another example of the authentication and 
key sharing protocol to be executed prior to the data 
transmission in this data transmission system is shown 
in the flowchart of Fig. 14. The processing procedure on 
the data transmission apparatus 10 side in this case is 
shown in the flowchart of Fig. 15, and the processing 
procedure on the data receiving apparatus 20 side is 
shown in the flowchart of Fig. 1 6. 
[0123] In Fig. 14 showing the authentication and 
key sharing protocol, the data transmission apparatus 
10 is shown as a source device A, and the data receiv- 
ing apparatus 20 is shown as a sink device B. These 
apparatuses are given information Kv Indicating the 
validity of themselves at the time of manufacture, and 
hold this information in secret. 

[0124] In this data transmission system, the CPU 
12 of the data transmission apparatus 10, that is, the set 
top box, first transmits a start command for starting the 
transmission of data from the input/output interface 16 
to the data receiving apparatus 20 via the transmission 
line 30 (step S1 10). 

[0125] After the CPU 22 of the data receiving appa- 
ratus 20, that is, the recording apparatus, receives the 
start command (START command) sent from the data 
transmission apparatus 10 via the transmission line 30 
connected to the input/output interface 24 (step S120), 
the CPU 22 generates a request for starting the authen- 
tication and key sharing protocol (Request authentica- 
tion) and two random numbers Bn1 and Bn2 of m (e.g., 
m = 64) bits and transmits them to the data transmission 
apparatus 10 via the input/output interface 24 (step 
S121). 

[0126] After the CPU 12 of the data transmission 
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K > lso = HashfKv||Anl6Bnl]lsb,n 



thus calculated m^n 9 enCryp,ion K-iso 

me data receiving apparatus 10 steo S1?1 a »w • 
mis concatenated data (KfeoiA^RnpT ' ! mpUtS 
tion Hash[ J. «0|An2 fi Bn2) to a hash tunc- 
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[0130] Then, the CPU 12 of the data i» • - 
apparatus 1 0 ***** *k a ,ransm 'ssion 4 5 

KF«»rciius iu sends the response data ro^, l4 , 
step S1 14 to thA rtoto • 2 calculated at 



Rl = Hash[Kv||Anl|BntJmsbj) 
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The CPU 12 then sets the least significant q (e.g., q = 
64) bits of the output thereof as an encryption key 
Kasync to be used to encrypt the data to be transmitted 
by asynchronous transmission (step Si 18). 
[0137] The CPU 22 of the data receiving apparatus 5 
20 generates concatenated data (K'iso||An2gBn2) 
formed by the encryption key K'iso calculated at step 
S123, the random number An2 received at step Si 22 
and the random number Bn2 sent to the data transmis- 
sion apparatus 1 0 at step Si 21 , and inputs the concate- jo 
nated data (K , iso||An2gBn2) to a hash function Hash[ J. 

K' async = Hash[K r iso|jAn2|)Bn2] lsb_q 

The CPU 22 then sets the least significant q bits of the 15 
output thereof as an encryption key K'async to be used 
to decode the data transmitted by asynchronous trans- 
mission (step S12B). 

[0138] In this data transmission system, prior to^ 
data transmission, the authentication and key sharing 20 
protocol is performed by asynchronous transmission of 
IEEE 1394 between the data transmission apparatus 10 
and the data receiving apparatus 20. Thus, the data 
transmission apparatus 1 0 and the data receiving appa- 
ratus 20can authenticate the validity of each other and 25 
can share the encryption key for transmitting encrypted 
data by isochronous transmission and the encryption 
key for transmitting encrypted data by asynchronous 
transmission. 

[0139] That is, after the authentication and key 30 
sharing protocol is executed, the music data from the 
data transmission apparatus 10 is encrypted using the 
encryption key Kiso and transmitted by isochronous 
transmission, and the related data is encrypted using 
the encryption key Kasync and transmitted by asyn- 35 
chronous transmission (step S1 19). The data receiving 
apparatus 20 decodes the music data transmitted by 
isochronous transmission, using the encryption key 
K'iso, and decodes the related data transmitted by 
asynchronous transmission, using the encryption key 40 
K'async (step S129). Thus, the respective plain text 
data can be obtained. 

[0140] In general, since isochronous transmission 
and asynchronous transmission have different charac- 
teristics, encryption algorithms and modes suitable 4S 
therefor are used. Accordingly, when the encryption 
algorithm used for asynchronous transmission is 
weaker in terms of strength than that used for iso- 
chronous transmission, the encryption key Kasync used 
for asynchronous transmission is revealed relatively so 
easily in comparison with the encryption key Kiso used 
for isochronous transmission. In the authentication and 
key sharing protocol shown in Fig. 11, the encryption 
key Kasync and the encryption key Kiso are directly 
generated from the information Kv indicating the validity 55 
of the apparatus itself, which is held by each apparatus 
in secret Therefore, if the encryption key Kasync is 
revealed, the information Kv is revealed by, tor example. 



a round-robin attack. 

[0141] In contrast, in the authentication and key 
sharing protocol shown in Fig. 14, the encryption key 
Kiso is generated from the information Kv indicating the 
validity of the apparatus itself, which is held by each 
apparatus in secret, and the encryption key Kasync is 
generated from the encryption key Kiso. Therefore, 
even if the encryption key Kasync is revealed, the 
attacker cannot obtain the information Kv by attacking 
the unidirectional function Hash only once. The attacker 
must find the encryption key Kiso by a round-robin 
attack and then carry out a round-robin attack on the 
information Kv. 

[0142] That is, in the authentication and key sharing 
protocol shown in Fig. 14, in comparison with the 
authentication and key sharing protocol shown in 
Fig.11, the information Kv indicating the validity of the 
apparatus itself held by each apparatus in secret is hard 
to reveal, and the data requiring the assurance of a 
transmission band and related data relating to this data 
can be transmitted safely and reliably. 
[0143] In accordance with the authentication and 
key sharing protocol shown in Fig. 14, in the above- 
described data transmission system, the encryption key 
Kasync used for asynchronous transmission is gener- 
ated on the basis of the encryption key Kiso used for 
isochronous transmission. However, the encryption key 
Kasync used for asynchronous transmission may be 
generated from the information Kv, the random number 
An1 and the random number $n1, and the encryption 
key Kiso used for isochronous transmission may be 
generated from the encryption key Kasync, the random 
number An2 and the random number Bn2. 
[0144] Also, in accordance with the authentication 
and key sharing protocol shown in Fig. 14, the data gen- 
erated from the encryption key Kiso at the data trans- 
mission apparatus 10 is transmitted as the response 
data R2 to the data receiving apparatus 20, and the 
data generated from the information Kv at the data 
receiving apparatus 20 is transmitted as the response 
data R1 to the data transmission apparatus 10. How- 
ever, the data generated from the information Kv by the 
data transmission apparatus 10 may be transmitted as 
the response data R2 to the data receiving apparatus 
20, and the data generated from the encryption key Kiso 
by the data receiving apparatus 20 may be transmitted 
as the response data R1 to the data transmission appa- 
ratus 10. 

[0145] In the above-described data transmission 
system, by performing each authentication and key 
sharing protocol, transmission data is encrypted and 
decoded using the encryption keys Kiso and Kiso and 
the encryption keys Kasync and kasync, shared 
between the data transmission apparatus 10 and the 
data receiving apparatus 20. However, it is possible to 
separately prepare encryption keys (contents key) for 
encrypting and decoding the actually transmitted data 
and to share the contents keys between the data trans- 
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mission apparatus 10 and the data receiving apparatus 
20 by using the encryption keys Kiso and K'iso and the 
encryption keys Kasync and K'async. 
[0146J as is described above, in the present 
embedment, via an interface haying a first transmission 
mode in which a transmission band is ensured and a 
second transmission mode in which a transmission 
band is not ensured, data requiring the assurance of a 
transmission band is transmitted in the first transmit 
sion mode and related data relating to the data is trans- 
mitted in the second transmission mode. Thus the data 
car, be transmitted re.iabty by empioying the two types 
of transrn.ss.on modes, that is. transmission mode in 
winch a transmission band is secured and the transmis- 
sion mode in which a transmission band is no. secured. 
[0147J Also, the data requiring the assurance of a 
l m 7" band is «*W«d by a first encryption key 
and then transmrtted in the first transmission mode, an I 
the related data renting to the data is encrypted by a 
second encryption key and then transmitted in the sec- 
ond transmission mode. Thus, the data requiring the 
assurance of a transmission band and the related data 
relatmg to the data can be transmitted safely. 
[0148J Moreover, priorto data transmission, by exe- 
rt mUtUal aulhen «-«on and sharing 
of a plurality of encrypt.on keys between the data trans 
mission apparatus and the data receiving apparatus 
the data transmission apparatus and the data 2 
apparatus can authentteate the validity of eac^X? 
and share the encryption keys. Thus, the data requiring 
the assurance of a transmission band and tbe^eS 
to the data can be transmitted safe^ d 
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Claims 

1. An information processing system comprising: 

a firs, information processing apparatus com- 
prising an interface having a first transmission 
mode ,n which a transmission band is ensured 
and a second transmission mode in which a 
transition band is not ensured, and trans- 
mission control means for encrypting data 
requinng , he assurance „ ^ 

band by a fe. encryption key and then trans- 
mming the date in the firs, transmission mode 
m he mterface and for encrypting related data 
relating ,o the data by a second encryption key 
and then transmitting the related data in the 
second transmission mode via the interface- 
and ' 

a second information processing apparatus 
compnsmg an interface having a first transmis- 
sion mode in which a transmission band is 
ensured and a second transmission mode in 
wheh a transmission band is not ensured and 
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receiving control means for decoding, by the 
first encryption key, the data requiring the 
assurance of the transmission band which is 
rece, ved in me first transmission mode via the 

Zr^ V deCOding ' by ,he 
encryption key, the related data received in the 

second transmission mode via the interface. 

Theirrforrnation processing system as claimed in 

^.m,. W hereinpnor,odatatransmission.aproto- 
co. for performing muiua. authentication and shar- 
ing a plurakty of encryption keys between .he firs, 

ZZT Pr ° CeSSinS apPara,US and ,h * ^cond 
•"formation P roces ™9 apparatus is executed. 

3 ' ctel in !°T i0n Pr ° CeSSin9 SyS,em as <**«* in 
dam wherein musfc ^ , s transm . aed 

first transmission mode and related date relating , 0 
mission mode. 

4 ' c?l in ! 0rm r i0n Pr0CeSSin9 SyS,em as in 
claim . wherein the first information processing 
apparatus and the second information proceS ino 
apparatus are connected with each otner Tan 
interface conforming ,o the IEEE (the Institute of 
Eton* and Electronics Eng^ers) 1394 s.an* 
ard. for .ransmming data requiring the assurance of 
a transmission band in an isochronous tranTmis 
on mode and for transmitting related data reTaUng 
to the data ,n an asynchronous transmission mode 

" 2 L"T T" 0 " Pr0CeSSi " 9 System as ^ed in 
cla-m 4. wherein prior to data transmission, a proto- 
col for performing mutual authentication and sfrar- 
«0 a Plurality of encryption keys between the Zl 
|n ormat,on processing apparatus and the second 
formation processing apparatus is execute^ 
asynchronous transmission mode. 

The information processing system as claimed in 
da,m 1. wherem the second information processing 
apparatus generates two random numberTand 

the first information processing apparatus gen- 

thl , 7k nUmberS and tra "^*ts 

them to the second information processing 
apparatus. 

the first information processing apparatus gen- 
erates a n encrypUon key vsg<j ^ 

the data to be transmitted in the first transmis 
s.on mode and an encryption key used for 
encrypting the data to be transmitted in the 
second transmission mode on the basis of 
information indicating the validity of the appara- 
tus itseff. the generated random number and 
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the received random number, and 
the second information processing apparatus 
generates an encryption key used for decoding 
the data transmitted in the first transmission 
mode and an encryption key used for decoding 5 - 
the data transmitted in the second transmission 
mode on the basis of information indicating the 
validity of the apparatus itsett, the generated 
random number and the received random 
number 7 o 

7. The information processing system as claimed in 
claim 6, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the information indicating the validity of the appa- 15 
ratus itself, the generated random number and the 
received random number, to the second information 
processing apparatus, 

the second information processing apparatus 20 
transmits data Q generated on the basis of the 
information indicating the validity of the appara- 
tus itself, the generated random number and 
the received random number, to the first infor- 
mation processing apparatus, 25 
the first information processing apparatus gen- 
erates an encryption key used for encrypting 
the data to be transmitted in the first transmis- 
sion mode and an encryption key used for 
encrypting the data to be transmitted in the 30 
second transmission mode in the case where 
data Q' generated on the basis of the informa- 
tion indicating the validity of the apparatus 
itself, the generated random number and the 
received random number is coincident with the 35 
received data Q, and 

the second information processing apparatus 
generates an encryption key used for decoding 
the data transmitted in the first transmission 9. 
mode and an encryption key used for decoding 40 
the data transmitted in the second transmission 
mode in the case where data P* generated on 
the basis of the information indicating the valid- 
ity of the apparatus itself, the generated ran- 
dom number and the received random number 45 
is coincident with the received data P. 

8. The information processing system as claimed in 
claim 7, wherein the second information processing 
apparatus generates two random numbers R1 and so 
R2 and transmits them to the first information 
processing apparatus. 

the first information processing apparatus gen- 
erates two random numbers Si and S2 and 55 
transmits them to the second information 
processing apparatus, 



the first information processing apparatus 
transmits data P generated on the basis of 
information indicating the validity of the appara- 
tus itself, the generated random number S2 
and the received random number R2, to the 
second information processing apparatus, 

the second information processing apparatus 
transmits data O generated on the basis of 
information indicating the validity of the appara- 
tus itself, the received random number Si and 
the generated random number Rl, to the first 
information processing apparatus, 

the first information processing apparatus. gen- 
erates an encryption key K1 used for encrypt- 
ing the data to be transmitted in the first 
transmission mode and an encryption key K2 
used for encrypting the data to be transmitted 
in the second transmission mode in the case 
where data O' generated on the basis of the 
information inalcating the validity of the appara- 
tus itserf, the generated random number S1 
and the received random number R1 is coinci- 
dent with the received data Q, and 

the second information processing apparatus 
generates an encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode and an encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P* 
generated on the basis of the information indi- 
cating the validity of the apparatus itself, the 
received random number S2 and the generated 
random number R2 is coincident with the 
received data R 

The information processing system as claimed in 
claim 8, wherein the first information processing 
apparatus generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function using the infor- 
mation indicating the. validity of the apparatus itserf, 
the generated random number S1 and the received 
random number Rl, and generates the encryption 
key K2 used for encrypting the data to be transmit- 
ted in the second transmission mode, on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2, and 

the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode, on the basis of the result of cal- 
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culation of a unidirectional function using the 
information indicating the validity of the appara- 
tus itself, the received random number Si and 
the generated random number Ri, and gener- 
ates the encryption key K'2 used for decoding , 
the data transmitted in the second transmission 
mode, on the basis of the result of calculation 
of a unidirectional function using the informa- 
tion rndicating the validity of the apparatus 
itself, the received random number S2 and the 
generated random number R2. 

10. The information processing system as claimed in 
clam 9, wherein the first information processing 
apparatus transmits data P generated on the basis « 
of the result of calculation of a unidirectional func- 
tion us.ng the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2. to the sec- 
ond information processing apparatus. x 

the second information processing apparatus 
transmits data O generated on the basis of the 
result of calculation of a unidirectional function 
using the information indicating the validity of ?5 
the apparatus itself, the received random 
number S1 and the generated random number 
RI. fo the second information processing 
apparatus, a 

the first information processing apparatus gen- 
erates the encryption key K1 used for encrypt- 
mg the data to be transmitted in the first 
transmission mode and the encryption key K2 
used for encrypting the data to be transmitted 35 
m the second transmission mode in the case 
where data Q- generated on the basis of the 
result ol calculation of a unidirectional function 
using the information indicating the validity of 
the apparatus itself, , he generated random <o 
number S1 and (he recejved 

B incident with the received data 0 and 
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the second information processing ap paratus 
generates the encryption key K'l used for « 
decoding the data transmitted in the first trans- 
mission mode and the encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P 
generated on the basis of the result of calcula- so 
tion of a unidirectional function using the infer- 
matron , indicating the validity of the apparatus 
itself, the received random number S2 and the 
generated random number R2 is coincident 
with the received data R 

11 ' c.aL in M a,i ° n Pr0CeSSi " 9 W 38 **"«» ^ 
clarm 9, where.n the first information processing 



apparatus and the second information processing 
apparatus generate the encryption key K1 the 
encryption key K2. the encryption key IC1 and the 
encryption key 102. using a bit value of a part of the 
result of calculation of the unidirectional function. 

12. ^e information processing system as claimed in 
cla.m 11, wherem the first information processing 
apparatus and the second information processing 

QfmrTthp TT ,he d3,a P ' me dala 0'. <ne data 
O and the data P", using a bit value of a part of the 
resuf, of calculation of the unidirectional function 

13. The information processing system as cfaimed in 
c.a,m it. wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1 Z 
encryption key K2, the encryption key K 1 and the 
encryption key K2, using a ,eas, signfficant n bits of 
*e resuf, of calculation of the unidirectional tunc 

14 ' c?a?m in !° 3 r Th™ P T SSin9 SVS,em 85 claimed h 
claim 13, wherein the first information processing 

apparatus and the second information processing 

O TnTT ,he da,a P ' ,he *"* O: the data 
Q and the data P", using a most significant m bits of 
the resuf. of calculation of the unidirectional func 



? 1 Pr0CeSSing Syslem 38 c, ^ed in 
clarm 8, wherem the first information processing 
apparatus generates the encryption key K 1 used for 
encryptrng the data , 0 be ° 
tran S m lssl0n mode Qn m ^ rf ^ ^ 

culatron of a unidirectional function with respect to 
ccncatenated data termed by concatenating the 
nfomtat.on rnd.cating the validity of the apparatus 
itself, the generated random number Si Tnd the 
recerved random number Ri. and generates the 
enoyption key K2 used for encrypt^ the d L o 

t2 TS KSUH ° f Ca ' CU,a,i0n of 8 ™« ec- 
bona. function with respect to concatenated data 

formed by concatenating the information indicating 

randT' * 0, K ,he 9PPara,US ^ "» 3 
nTmt^nT * "* ~»« ™«* 

the second information processing apparatus 
generates the encryption key K'l used for 
decoding the data transmitted in the first trans- 
mrssron mode, on the basis of the result of cal- 
culation of a unidirectional function with respect 
to concatenated data formed by concatenating 
the ^formation indicating the validity of the 
apparatus itseB. the received random number 
bl and the generated random number R1 and 
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generates the encryption key K'2 used for 
decoding the data transmitted in the second 
transmission mode, on the basis of the result of 
calculation of a unidirectional function with 
respect to concatenated data formed by con- 5 
catenating the information indicating the valid- 
ity of the apparatus itself, the received random 
number S2 and the generated random number 
R2. 

10 

■ 16. The information processing system as claimed in 
claim 15, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of a unidirectional func- 
tion with respect to concatenated data formed by 15 
concatenating the information indicating the validity 
of the apparatus itself, the generated random 
number S2 and the received random number R2, to 
the second information processing apparatus, 

20 

the second information processing apparatus 
transmits data Q generated on the basis of the 
result of calculation of a unidirectional function 
with respect to concatenated data formed by 
concatenating the information indicating the 25 
validity of the apparatus itself, the received ran- 
dom number S1 and the generated random 
number R1, to the first information processing 
apparatus, 

30 

the first information processing apparatus gen- 
erates the encryption key K1 used for encrypt- 
ing the data to be transmitted in the first 
transmission mode and the encryption key K2 
used for encrypting the data to be transmitted 35 
in the second transmission mode in the case 
where data Q* generated on the basis of the 
result.of calculation of a unidirectional function 
with respect to concatenated data formed by 
concatenating the information indicating the 40 
validity of the apparatus itself, the generated 
random number S1 and the received random 
number R1 is coincident with the received data 
Q, and 

45 

the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode and the encryption key K'2 used 
for decoding the data transmitted in the second so 
transmission mode in the case where data P' 
generated on the basis of the result of calcula- 
tion of a unidirectional function with respect to 
concatenated data formed by concatenating 
the information indicating the validity of the ss 
apparatus itself, the received random number 
S2 and the generated random number R2 is 
coincident with the received data P. 



17. The information processing system as claimed in 
claim 6, wherein the first information processing 
apparatus and the second information processing 
apparatus generate either one of the encryption key 
used for encrypting the data to be transmitted in the 
first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the generated random number and the 
received random number, and generate the encryp- 
tion key of the other transmission mode on the 
basis of the generated encryption key, the gener- 
ated random number and the received random 
number. 

18. The information processing system as claimed in 
claim 17, wherein the first information processing 
apparatus, generates either one of the encryption 
key used for encrypting the data to be transmitted in 
the first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the received random number and the gener- 
ated random number, and transmits data P gener- 
ated on the basis of the generated encryption key, 
the received random number and the generated 
random number to the second information process- 
ing apparatus, 

the second information processing apparatus 
generates either one of the encryption key 
used for decoding the data transmitted in the 
first transmission mode and the encryption key 
used tor decoding the data transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the appara- 
tus itself, the received random number and the 
generated random number, and verifies 
whether or not data P' generated on the basis 
of the generated encryption key, the received 
random number and the generated random 
number is coincident with the received data P, 
and in the case where the data P' is coincident 
with the data P, transmits data Q generated on 
the basis of the information indicating the valid- 
ity of the apparatus itself, the received random 
number and the generated random number to 
the first information processing apparatus and 
generates the encryption key of the transmis- 
sion mode for which the encryption key is not 
generated yet, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key of the 
transmission mode for which the encryption 
key is already generated, the received random 
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number and the generated random number 
and 

the first information processing apparatus gen 
erates the encryption key of the transmission 
mode for which the encryption key is not yet 
generated, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key of the 
transmission mode tor which the encryption 
key is already generated, the received random 
number and the generated random number in 
the case where data Q' generated on the basis 
of the information indicating the validity of the 
apparatus itseff. the received random number 
and the generated random number is coinci- 
dent with the received data O. 



19. The information processing system as claimed jf , 
claim 18, wherein the second information process- 
ed rT^ 9enera,eS *° rand ° m nUmberS R1 
and R2 and transmrts them to the first information 
processing apparatus, 

• the first information processing apparatus gen- 
erates two random numbers S1 and S2 and 
transmits them to the second information 
processing apparatus, 
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30 



the first information processing apparatus gen- 
erates one encryption key Kl of the encryption 
key used for encrypting the data to be transmit- 
ted in the first transmission mode and the 
encryption key used for encrypting the data to 35 

modlTT!" in SeC ° nd emission 
mode on the bas,s of the information indicating 
the vai, dlIy of the apparatus nse „ tne recej J 

random number Rt and the generated random 

'A ,ranSmftS dala P 9 enera, <* °" <o 
he basis of the generated encryption key K1 

the received random number R2 and the gen- 
erated random number S2 to the second infer- 
mation processing apparatus, 

the second information processing apparatus " 
generates one encryption key K>1 of the 
encryption key used fe( . ^ 

transmitted in the firs, trar^ission'mode and 
he encryption key used for decoding the data so 
tranced in the second transmit 
on the basis of the information indicating the 
vaW«y of the apparatus itself. » he „J£ ran 
dom number S1 and the generated random 
number Ri . and verrf jes whether ^ 

generated on the basis of the generated 
encrypt™ key K'l. the received random 
number S2 and the generated random numb™ 



R2 is coincident with the received data P and in 
the case where the data P is coincident with 
the data P. transmits data Q generated on the 
basis of the information indicating the validity ot 
the apparatus itseff. the receded random 
number S1 and the generated random number 
R1 to the hrst information processing appara- 
us and generates the encryption key K'2 of the 
transmesion mode for which the encryption 
key is not generated yet, of the encryption keys 
used for decoding the data transmled in Z 
first transmission mode and the second trans- 

Key K 1 of the transmission mode for which the 
encryption key is already generated the 
received random number S2 and the generated 
random number R2, and 

the first information processing apparatus gen- 
erates the encryption key K2 of the transmis- 
sion mode for which the encryption key is not 
ye. generated, of the encryption keys used (or 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 

mode, on the basis of the encryption key Kf of 
the transmiss.on mode for which the encryption 
key is already generated, the received random 
numberR2and.he generated random number 
S2, ,n the case where data Q' generated on the 
basis of the information indicating the validity of 
he apparatus itself, the received random 
number Ri and the generated randomnumbeT 
S1 is coincident with the received data Q. 

2 °" l^lT"! °" Pr0CeSSin9 W 38 Maimed in 
ctaim 19. wherein the first information processing 
apparatus generates the encryption key^l ^2 

funln 'T 01 Mti0n °' a "^irectiona 
tuncon using the information indicating the vaOdity 
J the yparatus tee,,, the received random numbed 
R1 and the generated random number Si and 
generates the encryption key K2 on the basis of the 

2 l cateufeUon of a unidirectionai 

using the generated encryption key K1. , he 
rece,ved random number R 2 and the generated 
random number S2, and 9«neratea 

the second information processing apparatus 
generates the encryption key K "1 on the basis 

fl^ reSUN °' f" CU ' ati0n °' a ""Sectional 
SST.T 9 ,he in,OITnation *"*«ng the 
vanity ° f * e apparatus itself, the received ran- 
dom number Si and the generated random 

2 ° n the basB °f the result of calculation of! 
unidirectional function using the generated 
encwtion key K'1. me receded random 
number S2 and the generated random numbeT 
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R2. 

21. The information processing system as claimed in 
claim 20, wherein the first information processing 
apparatus transmits data P generated on the basis 5 
o! the result of calculation of the unidirectional func- 
tion using the generated encryption key K1, the 
received random number R2 and the generated 
random number S2 to the second information 
processing apparatus, io 

the second information apparatus verifies 
whether or not data P' generated on the basis 
of the result of calculation of the unidirectional 
function using the generated encryption key is 
K'1, the received random number S2 and the 
generated random number R2 is coincident 
with the received data P, and in the case where 
the data P* is coincident with the data R trans- 
mits data Q generated on the basis of the result 20 
of calculation of the unidirectional function 
using the information indicating the validity of 
the apparatus itsell, the received random . 
number Si and the generated random number 
Rt to the first information processing appara- 25 
tus, and 

the first information processing apparatus gen- 
erates the encryption key K2 in the case where 
data Q l generated on the basis of the result of 30 
calculation of the unidirectional function using 
the information indicating the validity of the 
apparatus itself, the received random number 
R1 and the generated random number S1 is 
coincident with the received data O. 35 

22. The information processing system as claimed in 
claim 20, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the <o 
encryption key K2, the encryption key K'1 and the 
encryption key K'2, using a bit value of a part of the 
result of calculation of the unidirectional function. 

23. The information processing system as claimed in as 
claim 22, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data R the data G\ the data 

O and the data P\ using a bit value of a part of the 
result of calculation of the unidirectional function. so 

24. The information processing system as claimed in 
claim 22, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the 55 
encryption key K2, the encryption key K*1 and the 
encryption key K2, using the least sign'rf icant n bits 

of the result of calculation of the unidirectional func- 



tion. 

25. The information processing system as claimed in 
claim 24, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data R the data Q\ the data 
Q and the data P\ using the most significant m bits 
of the result of calculation of the unidirectional func- 
tion. 

26. The information processing system as claimed in 
claim 19, wherein the first information processing 
apparatus generates the encryption key K1 on the 
basis of the result of calculation of a unidirectional 
function with respect to concatenated data formed 
by concatenating the information indicating the 
validity of the apparatus itself, the received random 
number R1 and the generated random number, and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function with 
respect to concatenated data formed by concate- 
nating the information indicating the generated 
encryption key K1 . the received random number R2 
and the generated random number S2, and 

the second information processing apparatus 
generates the encryption key K'1 on the basis 
of the result of calculation of a unidirectional 
function with respect to concatenated data 
formed by concatenating the information indi- 
cating the validity of the apparatus itseff, the 
received random number S1 and the generated 
random number Rl , and generates the encryp- 
tion key K'2 on the basis of the result of calcu- 
lation of a unidirectional function with respect to 
concatenated data formed by concatenating 
the generated encryption key K'1, the received 
random number S2 and the generated random 
number R2. 

27. The information processing system as claimed in 
claim 26, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of the unidirectional func- 
tion with respect to concatenated data formed by 
concatenating the generated encryption key K1 , the 
received random number R2 and the generated 
random number S2 to the second information 
processing apparatus, 

the second information apparatus verifies 
whether or not data P* generated on the basis 
of the result of calculation of the unidirectional 
function with respect to concatenated data 
formed by concatenating the generated 
encryption key K'1, the received random 
number S2 and the generated random number 
R2 is coincident with the received data R and in 
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the case where the data P' is coincident with 
the data P. transmits data O generated on the 
basis of the result of calculation of the unidirec- 
tional function with respect to concatenated 
data formed by concatenating the information 
indicating the validity of the apparatus itself, the 
received random number St and the generated 
random number R1 to the first information 
processing apparatus, and 

the first information processing apparatus gen- 
erates the encryption key K2 in the case where 
data 0- generated on the basis of the result of 
calculation of the unidirectional function with 
respect to concatenated data formed by con- 
catenating the information indicating the valid- 
ity of the apparatus teetf. the received random 
number R1 and the generated random number 
S1 1S coincident with the received data Q. 

28. An information processing method for performing 
data transmission between a first information 
processing apparatus and a second information 
processes apparatus via an interface having a first 
transm,ss.on mode in which a transmission band is 
ensured and a second transmission mode in which 
a transmission band is not ensured, the method 
comprising the steps of: 



38 



10 



encrypting data requiring the assurance of the 
transmission band from the first information 
processing apparatus by a first encryption key 
and then transmitting the data in the first trans 
mission mode, while encrypting related data 
relating to the data by a second encryption key 
and then transmitting the related data in the 
second transmission mode; and 

decoding, by the first encryption key on the 
side of the second information processing 
apparatus, the data requiring the assurance of 
he transmission band which is received in the 
first transmission mode, and decoding, by the 
second encryption key, the related data 
received in the second transmission. 

M ' daL in JrH i0n Pr ° CeSSin9 me,h ° d 35 clai ™<* 
cla,m 28, wherein prior to data transmission, a pro- 
tocol for performing mutual authentication and 
sharing a p urality of encryption keys between the 
fi*t in format™ processing apparatus and the sec- 
ond ^formation processing apparatus is executed. 

30 " ^L i "Ir a K ,, ' 0n proCeSSin9 me,nod 35 «**■«• i" 
ctan 28. wherein music data is transmitted in the 
.rat transmission mode and related data relating to 
the mus.0 data is transmitted in the second trans 
mission mode. 



da m t „ " Pr0CeSSin9 me,h0d as in 
claim 28. wherein the first information processing 
apparatus and the second information processing 

Sal a ? COnneCte<< Wi ' h each 0,her ™ an 
interface conforming to the IEEE (the Institute of 
Elec ncat and Electronics Engineers) ,394 stand 
ard, for transmitting data requiring the assurance of 
a transmission band in an isochronous transmis- 
sion mode and for transmitting related data relating 
to the data ,n an asynchronous transmission mode 

claim 31. wherein prior to data transmission, a pro- 
tocol for performing mutual authentication and 
haring a plura.fty of encryption keys between me 
first information processing apparatus and the sec- 
ond information processing apparatus is executed 
<n an asynchronous transmission mode. 

33 ' dafJoTf °" Pf0CeSSina metnod as cla ^ed in 
claim 28, wherein the second information process- 
2 1 apparatus generates two random numbers and 
^ 10 ,f1eteti «on Processing 

the first infomiation processing apparatus gen- 
erates twc .random numbers and Irani* 

ifSIs S6C0nd in,0,mati0n 
the first information processing apparatus gen- 

the data to be transmitted in the first transmis 
s.on mode and an encryption key used for 
encryphng the data to be transmitted in the 
second transmission mode on the basis of 
"formation indicating the validity of the appara- 
os tseff. the generated random number a^d 
the received random number, and 

the second information processing apparatus 
generates an encryption key used for decoding 
the data transmitted in the first transmission 

«^e data transmitted in the second transmission 

Zrl 0 Tl baSiS °' informa «°n indicating the 
vafid«y of the apparatus Nse«. the generated 
random number and the receded random 
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cla.m 33. where.n the first information processino 
apparatus transmits data P generated on' £2 
of the information mdicating the vaBdity of the aooa 
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the second information processing apparatus 
transmits data O generated on the basis of the 
information indicating the validity of the appara- 
tus itself; the generated random number and 
the received random number, to the first infor- 5 
mation processing apparatus, 
the first information processing apparatus gen- 
erates an encryption key used for encrypting 
the data to be transmitted in the first transmis- 
sion mode and an encryption key used for w 
encrypting the data to be transmitted in the 
second transmission mode in the case where 
data O* generated on the basis of the informa- 
tion indicating the validity of the apparatus 
itself; the generated random number and the 15 
received random number is coincident with the 
received data O, and 

the second information processing apparatus 
generates an encryption key used for decoding 
the data transmitted in the first transmission 20 
mode and an encryption key used for decoding 
the data transmitted in the second transmission 
mode in the case where data P' generated on 
the basis of the information indicating the valid- 
ity of the apparatus itself; the generated ran- 25 
dom number and the received random number 
is coincident with the received data P. 

35. The information processing method as claimed in 
claim 34, wherein the second information process- 30 
ing apparatus generates two random numbers R1 
and R2 and transmits them to the first information 
processing apparatus, 

the first information processing apparatus gen- 35 
erates two random numbers S1 and S2 and 
transmits them to the second information 
processing apparatus, 

the first information processing apparatus 40 
transmits data P generated on the basis of 
information indicating the validity of the appara- 
tus itself, the generated random number S2 
and the received random number R2, to the 
second information processing apparatus, 45 

the second information processing apparatus 
transmits data Q generated on the basis of 
information indicating the validity of the appara- 
tus itself, the received random number S1 and 50 
the generated random number Rl , to the first 
information processing apparatus. 

the first information processing apparatus gen- 
erates an encryption key K1 used for encrypt- 55 
ing the data to be transmitted in the first 
transmission mode and an encryption key K2 
used for encrypting the data to be transmitted 



in the second transmission mode in the case 
where data Q' generated on the basis of the 
information indicating the validity of the appara- 
tus itself, the generated random number S1 
and the received random number Rl is coinci- 
dent with the received data Q, and 

the second information processing apparatus 
generates an encryption key K'l used for 
decoding the data transmitted in the first trans- 
mission mode and an encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P' 
generated on the basis of the information indi- 
cating the validity of the apparatus itself, the 
received random number S2 and the generated 
random number R2 is coincident with the 
received data R 

36. The information processing method as claimed in 
claim 35, wherein the first information processing 
apparatus generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function using the infor- 
mation indicating the validity of the apparatus itself, 
the generated random number S1 and the received 
random number R1, and generates the encryption 
key K2 used for encrypting the data to be transmit- 
ted in the second transmission mode, on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus "itself, the generated random number 
S2 and the received random number R2, and 

the second information processing apparatus 
generates the encryption key K'l used for 
decoding the data transmitted in the first trans- 
mission mode, on the basis ol the result of cal- 
culation of a unidirectional function using the 
information indicating the validity of the appara- 
tus itself, the received random number Si and 
the generated random number R1, and gener- 
ates the encryption key K'2 used for decoding 
the data transmitted in the second transmission 
mode, on the basis of the result of calculation 
of a unidirectional function using the informa- 
tion indicating the validity of the apparatus 
itself, the received random number S2 and the 
generated random number R2. 

37. The information processing method as claimed in 
claim 36. wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2, to the sec- 
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the second information processing apparatus 
transmits data O generated on the basis of the 
result of calculation of a unidirectional function 
using the information indicating the validity of 
the apparatus itself, the received random 
number SI and the generated random number 
tus t0 ,,rS ' i " f0rma,i0n Pressing appara- 

the first information processing apparatus gen- 
erates the encryption key K1 used for encrypt- 
ing the data to be transmitted in the first 
transmission mode and the encryption key K2 
used for encrypting the data to be transmitted 
m the second transmission mode in the case 
where data O" generated on the basis of the 
result of calculation of a unidirectional function 
using the information indicating the validity of 
the apparatus itself, the generated random 
number SI and the received random number 
R1 is coincident with the received data O and 
the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
mission mode and the encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P 
generated on the basis of the resutt of calcula- 
tion of a unidirectional function using the infor- 
mation indicating the validity of the apparatus 
itself, the received random number S2 and the 
generated random number R2 is coincident 
with the received data P. 



38. The information processing method as claimed in 
claim 36. wherein the first information processino 
apparatus and the second information processing 
apparatus generate the encryption key K1 the 
encryption key K2. the encryption key K'1 and the 
encryption key K'2, using a bit value of a part of the 
result of calculation of the unidirectional function. 

39 ' ciL'trf 0 " Pr0CeSSi " 9 35 <**»«» 

claim 38, wherein the first information processino 

apparatus and the second information processino 

apparatus generate the data R the data Q" the data 

O and the data P*. using a bit value of a part of the 

result of calculation of the unidirectional function. 

40. The information processing method as claimed in 
da.m 38. wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1 the 
encryption key K2, the encryption key K't and the 
encrypt k 6y ^ usi „ g ^ ^ 

of the result of calculation of the unidirectional func- 



41. The information processing method as claimed in 
claim 40, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data P. the data 0' the data 
O and the data P-, using the most significant m bits 
of the result of calculation of the unidirectional func- 

42 " MnlTT" Pr0CeSSin9 me,h0d as clai ™<* ^ 
claim 35, wherein the first information processino 

apparatus generates the encryption key K1 used for 
encrypting the data to be transmitted in the firs, 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function with respect to 
concatenated data formed by concatenating the 
|nforma,,on indicating the validity of the apparatus 
itself, the generated random number S1 and the 
receded random number Ri. and generates the 
encryption key K2 used for encrypting the data to 
be transmrfted in the second transmission mode on 
he basis o, the result o, emulation of a unidirec- 
tional funct.on with respect to concatenated data 
formed by concatenating the information indicating 
me valid,* of the apparatus itself, the generated 

XiXr 32 and ,he ~— — 

the second information processing apparatus 
generates the encryption key K'1 used for 
decoding the data transmitted in the first trans- 
m,ss.on mode, on the basis of the result of cal- 
culation of a unidirectional function with respect 
to concatenated data formed by concatenating 
the information indicating the validity of the 
apparatus itself, the received random number 
s>1 and the generated random number R1 and 
generates the encryption key K'2 used tor 
decoding the data transmitted in the second 
transnussion mode, on the basis of the result of 
calculation of a unidirectional function with 
respect to concatenated data formed by con- 
catenating the information indicating the valid- 
ity of the apparatus itself, the received random 
number S2 and the generated random number 

43. The information processing method as claimed in 
claim 42. wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of a unidirectional tunc- 
tion wth respect to concatenated data formed by 
concatenating the information indTcatingthe vaSdrty 

n 111 ^ ParahJS itSe "' ,ne aerated random 
numberS2andthe received random number R2 to 
the second information processing apparatus, ' 

the second information processing apparatus 
transmits data 0 generated on the basis of the 
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result of calculation of a unidirectional function 
with respect to concatenated data formed by 
concatenating the information indicating the 
validity of the apparatus itself, the received ran- 
dom number S1 and the generated random 5 
number R1, to the first information processing 
apparatus, 

the first information processing apparatus gen- 
erates the encryption key K1 used for encrypt- 
ing the data to be transmitted in the first w 
transmission mode and the encryption key K2 
used for encrypting the data to be transmitted 
in the second transmission mode in the case 
where data Q" generated on the basis of the 
result of calculation of a unidirectional function 15 
with respect to concatenated data formed by 
concatenating the information indicating the 
validity of the apparatus itself, the generated 
random number S1 and the received random 
number R1 is coincident with the received data 20 
Q,and 

the second information processing apparatus 
generates the encryption key K*1 used for 
decoding the data transmitted in the first trans- 
mission mode and the encryption key K'2 used 25 
for decoding the data transmitted in the second 
transmission mode in the case where data P' 
generated on the basis of the result of calcula- 
tion of a unidirectional function with respect to 
concatenated data formed by concatenating 30 
the information indicating the validity of the 
apparatus itself, the received random number 
S2 and the generated random number R2 is 
coincident with the received data P. 

35 

44. The information processing method as claimed in 
claim 33, wherein the first information processing 
apparatus and the second information processing 
apparatus generate either one of the encryption key 
used for encrypting the data to be transmitted in the *o 
first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the generated random number and the 45 
received random number, and generate the encryp- 
tion key of the other transmission mode on the 
basis of the generated encryption key, the gener- 
ated random number and the received random 
number. so 

45. The information processing method as claimed in 
claim 44, wherein the first information processing 
apparatus generates either one of the encryption 
key used for encrypting the data to be transmitted in 55 
the first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 



information indicating the validity of the apparatus 
itself, the received random number and the gener- 
ated random number, and transmits data P gener- 
ated on the basis of the generated encryption key, 
the received random number and the generated 
random number to the second information process- 
ing apparatus, 

the second information processing apparatus 
generates either one of the encryption key 
used for decoding the data transmitted in the 
first transmission mode and the encryption key 
used for decoding the data transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the appara- 
tus itself, the received random number and the 
generated random number, and verifies 
whether or not data P* generated on the basis 
of the generated encryption key, the received 
random number and the generated random 
number is coincident with the received data P, 
and in the case where the data P' is coincident 
with the data P, transmits data Q generated on 
the basis of the information indicating the valid- 
ity of the apparatus itself, the received random 
number and the generated random number to 
the first information processing apparatus and 
generates the encryption key of the transmis- 
sion mode for which the encryption key is not 
generated yet, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key of the 
transmission mode for which the encryption 
key is already generated, the received random 
number and the generated random number, 
and 

the first information processing apparatus gen- 
erates the encryption key of the transmission 
mode for which the encryption key is not yet 
generated, of the encryption keys used for 
decoding the data transmitted in the first trans- 
mission mode and the second transmission 
mode, on the basis of the encryption key of the 
transmission mode for which the encryption 
key is already generated, the received random 
number and the generated random number, in 
the case where data Q* generated on the basis 
of the information indicating the validity of the 
apparatus itself, the received random number 
and the generated random number is coinci- 
dent with the received data Q. 

46. The information processing method as claimed in 
claim 45, wherein the second information process- 
ing apparatus generates two random numbers Rl 
and R2 and transmits them to the first information 
processing apparatus, 
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the first information processing apparatus gen- 
erates two random numbers Si and S2 and 
transmits them to the second information 
processing apparatus, 

the first information processing apparatus gen- 5 
erates one encryption key Kl of the encryption 
key used for encrypting the data to be transmit- 
ted in the first transmission mode and the 
encryption key used for encrypting the data to w 
be transmitted in me second transmission 
mode, on the basis of the information indicating 
the validity of the apparatus itself, the received 
random number Rl and the generated random 
number SI , and transmits data P generated on I5 
the basis of the generated encryption key Kl 
the received random number R2 and the gen- 
erated random number S2 to the second infor- 
mation processing apparatus. 

the second information processing apparatus 
generates one encryption key K'l of the 
encryption key used for decoding the data 
transmitted in the first transmission mode and 
the encryption key used for decoding the data 25 
transmitted in the second transmission mode 
on the basis of the information indicating the 
validity of the apparatus itself, the received ran- 
dom number SI and the generated random 
number R1 . and verifies whether or not data P' 30 
generated on the basis of the generated 
encryption key K'l. the received random 
number S2 and the generated random number 
R2 is coincident with the received data P and in 
the case where the data P' is coincided with 35 
the data P, transmits data Q generated on the 
basis of the information indicating the validity of 
the apparatus itself, the received random 
number Si and the generated random number 
Rl to the first information processing appara- <o 
tus and generates the encryption key K'2 of the 
transmission mode for which the encryption 
keyrs not generated yet. of the encryption keys 
used for decoding the data transmitted in the 
first transmission mode and the second trans- ,5 
mission mode, on the basis of the encryption 
toy K 1 of the transmission mode for which the 
encryption key is alre ady generated, the 
received random number S2 and the generated 
random number R2. and ~ ^ 

the first information processing apparatus gen- 
erates the encryption key K2 of the transmis- 
sion mode for which the encryption key is not 

decodmg the data transmitted in the first trans- 
m.ss,on mode and the second transmission 
mode, on the basis of the encryption key Kl of 



the transmission mode for which the encryption 
key is already generated, the received random 
number R2 and the generated random number 
S2, in the case where data Q' generated on the 
basis of the information indicating the validity of 
the apparatus Itself, the received random 
number R1 and the generated random number 
S1 is coincident with the received data Q. 

47. The information processing method as claimed in 
claim 46. wherein the first information processinq 
apparatus generates the encryption key Kl on the 
basis of the resuf. of calculation of a unidirectional 
function using the information indicating the validity 
of the apparatus itself, the received random number 
R1 and the generated random number S1 and 
generates the encryption key K2 on the basis of the 
resu« of caption of a unidirectiona. function 
using the generated encryption key K1 the 
received random number R 2 and the generated 
random number S2, and 

the second information processing apparatus 
generates the encryption key K'l on the basis 
of the result of calculation of a unkfirectional 
function using the information indicating the 
validity of the apparatus itself, ,he received ran- 
dom number SI and the generated random 

K' ? tf,K k 9enefateS ,he encr yP«o" key 
2 on ,he basB <* the result of calculation of a 
unidirectional function using the generated 
encryption key K'l, the received random 
number S2 and the generated random number 

* ^TT" Pr0CeSSin9 method as cla ™° in 
cla.m 47. wherein the first information processing 
apparatus transmits data P generated on the baste 
of the result of calculation of the unidirectional func- 
tion using the generated encrypt/on key Kl the 
received random number R2 and the generated 
random number S2 to me second information 
processing apparatus, 

the second information apparatus verifies 
whet her or not datg p . generate<j ^ ^ 

of the result of ca.cu.at.on of the unkfirectiona. 
function using the generated encryption key 
K 1. the received random number S2 and the 
generated random number R2 is coincident 
TiJ ^ e,Veddata p - a "°i"the case where 

ITS r,' 5 C ° inCident WHh mC data R 
mrts data Q generated on the basis of the resuft 

of calculation of the unidirectional function 

using the information indicating the validhy of 

the ap^ratus itself, the received random 

number S. and the generated random numbed 

Rl to the first information processing appara- 
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tus, and 

the first information processing apparatus gen- 
erates the encryption key K2 in the case where 
data Q" generated on the basis of the result of s 
calculation of the unidirectional function using 
the information indicating the validity of the 
apparatus itself, the received random number 
Rl and the generated random number SI is 
coincident with the received data Q. w 

49. The information processing method as claimed in 
claim 47, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the is 
encryption key K2, the encryption key K'1 and the 
encryption key K'2, using a bit value of a part of the 
result of calculation of the unidirectional function. 

50. The information processing method as claimed in 20 
claim 49, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data R the data Q\ the data 

O and the data P\ using a bit value of a part of the 
result of calculation of the unidirectional function. 25 

51. The information processing method as claimed in 
claim 49, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the encryption key K1, the 30 
encryption key K2, the encryption key K'1 and the 
encryption key K'2, using the least significant n bits 

of the result of calculation of the unidirectional func- 
tion. 

35 

52. The information processing method as claimed in 
claim 51, wherein the first information processing 
apparatus and the second information processing 
apparatus generate the data R the data Q\ the data 

O and the data P\ using the most significant m bits <o 
of the result of calculation of the unidirectional func- 
tion. 

53. The information processing method as claimed in 
claim 46, wherein the first information processing 45 
apparatus generates the encryption key Kl on the 
basis of the result of calculation of a unidirectional 
function with respect to concatenated data formed 

by concatenating the information indicating the 
validity of the apparatus itself, the received random so 
number Rl and the generated random number, and 
generates the encryption key K2 on the basis of the 
resuft of calculation of a unidirectional function with 
respect to concatenated data formed by .concate- 
nating the information indicating the generated 55 
encryption key Kl , the received random number R2 
and the generated random number S2, and 



the second information processing apparatus 
generates the encryption key K*l on the basis 
of the result of calculation of a unidirectional 
function with respect to concatenated data 
formed by concatenating the information indi- 
cating the validity of the apparatus itself, the 
received random number Si and the generated 
random number R1 , and generates the encryp- 
tion key K'2 on the basis of the result of calcu- 
lation of a unidirectional function with respect to 
concatenated data formed by concatenating 
the generated encryption key K'1, the received 
random number S2 and the generated random 
number R2. 

54. The information processing method as claimed in 
claim 53, wherein the first information processing 
apparatus transmits data P generated on the basis 
of the result of calculation of the unidirectional func- 
tion with respect to concatenated data formed by 
concatenating the generated encryption key Kl, the 
received random number R2 and the generated 
random number S2 to the second information 
processing apparatus. 

the second information apparatus verifies 
whether or not data P' generated on the basis 
of the result of calculation of the unidirectional 
function with respect to concatenated data 
formed by concatenating the generated 
encryption key K'1, the received random 
number S2 and the generated random number 
R2 is coincident with the received data R and in 
the case where the data P 1 is coincident with 
the data P, transmits data Q generated on the 
basis of the result of calculation of the unidirec- 
tional function with respect to concatenated 
data formed by concatenating the Information 
indicating the validity of the apparatus itself, the 
received random number SI and the generated 
random number Rl to the first information 
processing apparatus, and 

the first information processing apparatus gen- 
erates the encryption key K2 in the case where 
data Q' generated on the basis of the resuft of 
calculation of the unidirectional function with 
respect to concatenated data formed by con- 
catenating the information indicating the valid- 
ity of the apparatus itself, the received random 
number Rl and the generated random number 
SI is coincident with the received data Q. 

55. An information processing apparatus comprising: 
an interface having a first transmission mode in 
which a transmission band is ensured and a second 
transmission mode in which a transmission band is 
not ensured; and transmission control means for 
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encrypting data requiring the assurance of the 
transmission band by a first encryption key and 
then transmitting the data in the first transmission 
mode via the interface and for encrypting related 
data relating to the data by a second encryption key 5 
and then transmitting the related data in the second 
transmission mode via the interface. 

56. The information processing apparatus as claimed 

in daim 55, wherein the transmission control w 
means executes, prior to data transmission, a pro- 
tocol for performing mutual authentication and 
sharing a plurality of encryption keys with the other 
information processing apparatus. 

_ . 15 

57. Tne information processing apparatus as claimed 
in claim 55, wherein the transmission control 
means transmits music data in the first transmis- 
sion mode and transmits related data relating to the 
music data in the second transmission mode. 20 

58. The information processing apparatus as claimed 
in claim 55. further comprising, as the interface an 
interface conforming to the IEEE (the Institute of 
Electrical and Electronics Engineers) 1394 stand- 25 
ard, wherein the transmission control means trans- 
mits data requiring the assurance of a transmission 
band in an isochronous transmission mode and 
transmits related data relating to the data in an 
asynchronous transmission mode. ^ 

59. The information processing apparatus as claimed 
in claim 58. wherein the transmission control 
means executes, prior to data transmission, a pro- 
tocol for performing mutual authentication and 35 
sharing a plurality of encryption keys with the other 
information processing apparatus in an asynchro- 
nous transmission mode. 

60. The information processing apparatus as claimed 40 
in claim 55. wherein the transmission control 
means generates two random numbers and trans- 
mits them to the other information processing appa- 
ratus, then receives two random numbers 
generated by the other information processing 45 
apparatus, and generates an encryption key used 
for encrypting the data to be transmitted in the first 
transmission mode and an encryption key used for 
encrypting the data to be transmitted in the second 
transmission mode on the basis of information indi- 50 
eating the validity of the apparatus itself, the gener- 
ated random number and the received random 
number. 



tus rtseff. the generated random number and the 
received random number, to the other information 
processing apparatus, then receives data Q gener- 
ated by the other information processing apparatus 
on the basis of the information indicating the validity 
of the apparatus itself, the received random number 
and the generated random number, and generates 
an encryption key used for encrypting the data to be 
transmitted in the first transmission mode and an 
encryption key used for encrypting the data to be 
transmitted in the second transmission mode in the 
case where data Q' generated on the basis of the 
information indicating the validity of the apparatus 
tseff, the generated random number and the 
received random number is coincident with the 
received data O. 

62. The information processing apparatus as claimed 
in clatm 61, wherein the transmission control 
means receives a random number R2 generated by 
the other information processing apparatus, gener- 
ates two random numbers S1 and S2 and transmits 
them to the other information processing appara- 
tus, transmits data P generated on the basis of 
mformafcon indicating the validity of the apparatus 
'tself, the generated random number S2 and the 
received random number R2 to the other informa- 
tion processing apparatus, receives data Q gener- 
ated by the other information processing apparatus 
on the basis of information indicating the validity of 
the apparatus itself, the received random number 
S1 and the generated random number R1 and 
generates an encryption key K 1 used for encrypting 
the data to be transmitted in the first transmission 
mode and an encryption key K2 used for encrypting 
the data to be transmitted in the second transmis- 
sion mode in the case where data Q' generated on 
the basis of the information indicating the validity of 
the apparatus itself, the generated random number 
S1 and the received random number R1 is coinci- 
dent with the received data Q. 



61. The information processing apparatus as claimed 55 
in claim 60. wherein the transmission control 
means transmits data P generated on the basis of 
the information indicating the validity of the appara- 



63. The information processing apparatus as claimed 
m claim 62. wherein the transmission control 
means generates the encryption key K1 used for 
encrypting the data to be transmitted in the first 
transmission mode, on the basis of the result of cal- 
culation of a unidirectional function using the infor- 
mation indicating the validity of the apparatus itself 
the generated random number S1 and the received 
random number R1. and generates the encryption 
key K2 used for encrypting the data to be transmit- 
ted in the second transmission mode, on the basis 
of the result of calculation of a unidirectional func- 
tion using the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2. 
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64. The information processing apparatus as claimed 
in claim 63, wherein the transmission control 
•means transmits data P generated on the basis of 
the result of calculation of a unidirectional function . 
using the information indicating the validity of the 5 
apparatus itself, the generated random number S2 
and the received random number R2 to the other 
information processing apparatus, receives data Q 
generated by the other information processing 
apparatus on the basis of the result of calculation of w 
a unidirectional function using the information indi- 
cating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number Rl, and generates the encryption 
key K1 used for encrypting the data to be transmit- J5 
ted in the first transmission mode and the encryp- 
tion key K2 used for encrypting the data to be 
transmitted in the second transmission mode in the 
case where data O' generated on the basis of the 
result of calculation of a unidirectional function 20 
using the information indicating the validity of the 
apparatus itself, the generated random number Si 
and the received random number R1 is coincident 
with the received data Q. 

25 

65. The information processing apparatus as claimed 
in claim 63, wherein the transmission control 
means generates the encryption key K1 and the 
encryption key K2, using a bit value of a part of the 
result of calculation of the unidirectional function. 30 

66. The information processing apparatus as claimed 
in claim 65, wherein the transmission control 
means generates the data P and the data Q\ using 

a bit value of a part of the result of calculation of the 35 
unidirectional function. 

67. The information processing apparatus as claimed 
in daim 65, wherein the transmission control 
means generates the encryption key K1 and the 40 
encryption key K2, using the least significant n bits 

of the result of calculation of the unidirectional func- 
tion. 

68. The information processing apparatus as claimed 45 
in daim 67, wherein the transmission control 
means generates the data P and the data Q\ using 
the most significant m bits of the result of calcula- 
tion of the unidirectional function. 

50 

69. The information processing apparatus as claimed 
in claim 62, wherein the transmission control 
means generates the encryption key Kl used for 
encrypting the data to be transmitted in. the first 
transmission mode, on the basis of the result of cal- 55 
culation of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 



itself, the generated random number S1 and the 
received random number R1, and generates the 
encryption key K2 used for encrypting the data to 
be transmitted in the second transmission mode, on 
the basis of the result of calculation of a unidirec- 
tional function with respect to concatenated data 
formed by concatenating the information indicating 
the validity of the apparatus itself, the generated 
random number S2 and the received random 
number R2. 

70. The information processing apparatus as claimed 
in claim 69, wherein the transmission control 
means transmits data P generated on the basis of 
the result of calculation of a unidirectional function 
with respect to concatenated data formed by con- 
catenating the information indicating the validity of 
the apparatus itself, the generated random number 
S2 and the received random number R2, to the 
other information processing apparatus, receives 
data Q generated by the other information process- 
ing apparatus on the basis of the result of calcula- 
tion of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the received random number S1 and the gen- 
erated random number R1, and generates the 
encryption key Kl used for encrypting the data to 
be transmitted in the first transmission mode and 
the encryption key K2 used for encrypting the data 
to be transmitted in the second transmission mode 
in the case where data Q' generated on the basis of 
the result of calculation of a unidirectional function 
with respect to concatenated data formed by con- 
catenating the information indicating the validity of 
the apparatus itself, the generated random number 
SI and the received random number Rl is coinci- 
dent with the received data Q. 

71. The information processing apparatus as claimed 
in claim 60, wherein the transmission control 
means generates either one of the encryption key 
used for encrypting the data to be transmitted in the 
first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the generated random number and the 
received random number, and generates the 
encryption key of the other transmission mode on 
the basis of the generated encryption key, the gen- 
erated random number and the received random 
number. 

72. The information processing apparatus as claimed 
in claim 71, wherein the transmission control 
means generates either one of the encryption key 
used for encrypting the data to be transmitted in the 
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first transmission mode and the encryption key 
used for encrypting the data to be transmitted in the 
second transmission mode, on the basis of the 
information indicating the validity of the apparatus 
itself, the received random number and the gener- 5 
ated random number, transmits data P generated 
on the basis of the generated encryption key, the 
received random number and the generated ran- 
dom number fo the other information processing 
apparatus, receives data Q generated by the other ,„ 
information processing apparatus on the basis of 
the information indicating the validity of the appara- 
tus itself, the received random number and the gen- 
erated random number, and generates the 
encryption key of the transmission mode for which 
the encryption key is not yet generated, of the 
encryption keys used for decoding the data trans- 
mitted in the first transmission mode and the sec- 
ond transmission mode, on the basis of the 
encryption key of the transmission mode for which 
the encryption key is already generated, the 
received random number and the generated ran- 
dom number, in the case where data Q' generated 
on the basis of the information indicating the validity 
of the apparatus itself, the received random number , s 
and the generated random number is coincident 
with the received data Q. 



73. The information processing apparatus as claimed 
in claim 72, wherein the transmission control 30 
means receives two random numbers Ri and R2 
generated by the other information processing 
apparatus, generates two random numbers Si and 
S2 and transmits them to the other information 
processing apparatus, generates one encryption 35 
key K1 of the encryption key used for encrypting ihe 
data to be transmitted in the first transmission mode 
and the encryption key used for encrypting the data 
to be transmitted in the second transmission mode 
on the basis of the information indicating the validity <o 
of the apparatus itself, the received random number 
R1 and the generated random number S1 trans- 
m.ts data P generated on the basis of the generated 
encryption key K1 . the received random number R2 
and the generated random number S2 to the other 45 
information processing apparatus, receives data Q 
generated by the other information processing 
apparatus on the basis of the information indicating 
the validity of the apparatus itsetf. the received ran- 
dom number S1 and the generated random number so 
RI. and generates the encryption key K2 of the 
transmission mode for which the enayption key is 
not yet generated, of the encryption keys used for 
decoding the data transmitted in the first transmis- 
sion mode and the second transmission mode on 55 
the basis of the encryption key K1 of the transmis- 
sion mode for which the encryption key is already 
generated, the received random number R2 and 



the generated random number S2, in the case 
where data Q' generated on the basis of the infor- 
mation indicating the validity of the apparatus itself 
the received random number R1 and the generated 
random number Si is coincident with the received 
data O. 

74. The information processing apparatus as claimed 
in clam 73, wherein the transmission control 
means generates the encryption key K1 on the 
basis of the resuft of calculation of a unidirectional 
function using the information indicating the validity 
of the apparatus itself, the received random number 
R1 and the generated random number S1 and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function 
using the generated encryption key K1 the 
received random number R2 and the generated 
random number S2. 

75. The information processing apparatus as claimed 
m claim 74, wherein the transmission control 
means transmits data P generated on the basis of 
the result of calculation of the unidirectional func- 
tion using the generated encryption key K1 the 
received random number R2 and the generated 
random number S2 to the other information 
processing apparatus, receives data Q generated 
by the other information processing apparatus on 
the bass of the resuft of calculation of the unidirec- 
tional function using the information indicating the 
validity of the apparatus itself, the received random 
number Si and the generated random number Ri 
and generates the encryption key K2 in the case 
where data O' generated on the basis of the result 
of calculation of the unidirectional function using the 
information indicating the validity of the apparatus 
itsetf, the received random number Ri and the gen- 
erated random number S1 is coincident with the 
received data O. 



76. The information processing apparatus as claimed 
m claim 74. wherein the transmission control 
means generates the encryption key K1 and the 
encryption key K2, using a bit value of a part of the 
result of calculation of the unidirectional function. 

77. The information processing apparatus as claimed 
-n claim 76, wherein the transmission control 
means generates the data P and the data a usino 
a bit value of a part of the resuft of calculation of the 
unidirectional function. 



78. The information processing apparatus as claimed 
<n cla™ 76, wherein the transmission control 
means generates the encryption key K1 and the 
encryption key K2, using the least significant n bits 
of the result of calculation of the unidirectional func- 
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tion. 

79. The information processing apparatus as claimed 
in claim 78 : wherein the transmission control 
means generates the data P and the data Q\ using 5 
the most significant m bits of the result of calcula- 
tion of the unidirectional function. 

80. The information processing apparatus as claimed 

in claim 73, wherein the transmission control w 
means generates the encryption key K1 on the 
basis of the result of calculation of a unidirectional 
function with respect to concatenated data formed 
by concatenating the information indicating the 
validity of the apparatus itself, the received random 15 
number R1 and the generated random number, and 
generates the encryption key K2 on the basis of the 
result of calculation of a unidirectional function with 
respect to concatenated data formed by concate- 
nating the information indicating the generated 20 
encryption key K1 , the received random number R2 
and the generated random number S2. 



83. The information processing apparatus as claimed 
in claim 82, wherein the receiving control means 
executes, prior to data transmission, a protocol for 
performing mutual authentication and sharing a plu- 
rality of encryption keys with the other information 
processing apparatus. 

84. The information processing apparatus as claimed 
in claim 82, wherein the receiving control means 
transmits music data in the first transmission mode 
and transmits related data relating to the music 
data in the second transmission mode. 

85. The information processing apparatus as claimed 
in claim 82, further comprising, as the interface, an 
interface conforming to the IEEE (the Institute of 
Electrical and Electronics Engineers) 1394 stand- 
ard, wherein the receiving control means receives 
data requiring the assurance of a transmission 
band in an isochronous transmission mode and 
receives related data relating to the data in an asyn- 
chronous transmission mode. 



81. The information processing apparatus as claimed 

in claim 80, wherein the transmission control 25 
means transmits data P generated on the basis of 
the result of calculation of the unidirectional func- 
tion with respect to concatenated data formed by 
concatenating the generated encryption key K1 1 the 
received random number R2 and the generated 30 
random number S2 to the other information 
processing apparatus, receives data O generated 
by the other information processing apparatus on 
the basis of the result of calculation of the unidirec- 
tional function with respect to concatenated data 35 
formed by concatenating the information indicating 
the validity of the apparatus itself, the received ran- 
dom number S1 and the generated random number 
R1, and generates the encryption key K2 in the 
case where data Q' generated on the basis of the 40 
result of calculation of the unidirectional function 
with respect to concatenated data formed by con- 
catenating the information indicating the validity of 
the apparatus itself, the received random number 
R1 and the generated random number S1 is cotnci- 45 
dent with the received data Q. 

82. An information processing apparatus comprising: 
an interface having a first transmission mode in 
which a transmission band is ensured and a second so 
transmission mode in which a transmission band is 

not ensured; and receiving control means for 
decoding, by a first encryption key, the data requir- 
ing the assurance of the transmission band which is 
received in the first transmission mode via the inter- 55 
face and for decoding, by a second encryption key, 
the related data received in the second transmis- 
sion mode via the interface. 



86. The information processing apparatus as claimed 
in claim 85, wherein the receiving control means 
executes, prior to data transmission, a protocol for 
performing mutual authentication and sharing a plu- 
rality of encryption keys with the other information 
processing apparatus. 

87. The information processing apparatus as claimed 
in claim 82, wherein the receiving control means 
generates two random numbers and transmits them 
to the other information processing apparatus, 
receives two random numbers generated by the 
other information processing apparatus, and gener- 
ates an encryption key used for decoding the data 
transmitted in the first transmission mode and an 
encryption key used for decoding the data transmit- 
ted in the second transmission mode on the basis 
of information indicating the validity of the appara- 
tus itself, the generated random number and the 
received random number. 

88. The information processing apparatus as claimed 
in claim 87, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the informa- 
tion indicating the validity of the apparatus itself, the 
generated random number and the received ran- 
dom number, 

transmits data Q generated on the basis of the 
information indicating the validity of the appara- 
tus itself, the generated random number and 
the received random number to the other infor- 
mation processing apparatus, and generates 
an encryption key used for decoding the data 
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transmitted in the first transmission mode and 
an encryption key used for decoding the data 
transmitted in the second transmission mode in 
the case where data P' generated on the basis 
of the information indicating the validity of the 5 
apparatus itself, the generated random number 
and the received random number is coincident 
with the received data R 

89. The information processing apparatus as claimed w 
in claim 88, wherein the receiving control means 
generates two random numbers R1 and R2 and 
transmits them to the other information processing 
apparatus, receives two random numbers S1 and 
S2 generated by the other information processing 75 
apparatus, receives data P generated by the other 
information processing apparatus on the basis of 
information indicating the validity of the apparatus 
itself, the generated random number S2 and the 
received random number R2, transmits data O gen- 20 
erated on the basis of information indicating the 
validity of the apparatus itself, the received random 
number S1 and the generated random number R1 
to the other information processing apparatus, and 
generates an encryption key K'l used for decoding 25 
the data transmitted in the first transmission mode 
and an encryption key K'2 used for decoding the 
data transmitted in the second transmission mode 
in the case where data P» generated on the basis of 
the information indicating the validity of the appara- 30 
tus itself, the received random number S2 and the 
generated random number R2 is coincident with the 
received data P 



90. The information processing apparatus as claimed 35 
in claim 89, wherein the receiving control means 
generates the encryption key K'l used for decoding 
the data transmitted in the first transmission mode 
on the basis of the result of calculation of a unidirec- 
tional function using the information indicating the 4 0 
validity of the apparatus itself, the received random 
number S1 and the generated random number R1 
and generates the encryption key K'2 used for 
decoding the data transmitted in the second trans- 
mission mode, on the basis of the result of cafcula- 45 
tion of a unidirectional function using the 
information indicating the validity of the apparatus 
itself, the received random number S2 and the gen- 
erated random number R2. 



erated on the basis of the result of calculation of a 
unidirectional function using the information indicat- 
ing the validity of the apparatus itself, the received 
random number Si and the generated random 
number Ri to the other information processing 
apparatus, and generates the encryption key K'1 
used for decoding the data transmitted in the first 
transmission mode and the encryption key K'2 used 
for decoding the data transmitted in the second 
transmission mode in the case where data P' gen- 
erated on the basis of the result of calculation of a 
unidirectional function using the information indicat- 
ing the validity of the apparatus itself, the received 
random number S2 and the generated random 
number R2 is coincident with the received data R 

92. The information processing apparatus as claimed 
m claim 90, wherein the receiving control means 
generates the encryption key K'l and the encryp- 
tion key K'2, using a bit value of a part of the result 
of calculation of the unidirectional function. 

93. The information processing apparatus as claimed 
m claim 92, wherein the receiving control means 
generates the data Q and the data P\ using a bit 
value of a part of the result of calculation of the uni- 
directional function. 

94. The information processing apparatus as claimed 
m claim 92, wherein the receiving control means 
generates the encryption key K'1 and the encryp- 
tion key K'2, using the least significant n bits of the 
result of calculation of the unidirectional function 
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91. The information processing apparatus as claimed 
m claim 90, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the result of 
calculation of a unidirectional function using the 55 
information indicating the validity of the apparatus 
itself, the generated random number S2 and the 
received random number R2, transmits data Q gen- 



95. The information processing apparatus as claimed 
in claim 94, wherein the receiving control means 
generates the data O and the data P\ using the 
most significant m bits of the result of calculation of 
the unidirectional function. 

96. The information processing apparatus as claimed 
m claim 69, wherein the receiving control means 
generates the encryption key K'1 used for decoding 
the data transmitted in the first transmission mode 
on the basis of the result of calculation of a unidirec- 
tional function with respect to concatenated data 
formed by concatenating the information indicating 
the validity of the apparatus itself, the received ran- 
dom numberSl and the generated random number 
Ri. and generates the encryption key K'2 used for 
decoding the data transmitted in the second trans- 
mission mode, on the basis of the result of calcula- 
tion of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the received random number S2 and the gen- 
erated random number R2. 
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97. The information processing apparatus as claimed 
in claim 96, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the result of 
calculation of a unidirectional function with respect 5 
to concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the generated random number S2 and the 
received random number R2, transmits data Q gen- 
erated on the basis of the result of calculation of a w 
unidirectional! unction with respect to concatenated 
data formed by concatenating the information^ indi- 
cating the validity of the apparatus itself, the 
received random number S1 and the generated 
random number R1 to the other information. 75 
processing apparatus, and generates the encryp- 
tion key K'1 used for decoding the data transmitted 

in the first transmission mode and the encryption 
key K'2 used for decoding the data transmitted in 
the second transmission mode in the case where 20 
data P* generated on the basis of the result of cal- 
culation of a unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
itself, the received random number S2 and the gen- ? s 
erated random number R2 is coincident with the 
received data P. 

98. The information processing apparatus as claimed 

in claim 87, wherein the receiving control means 30 
generates either one of the encryption key used for 
encrypting the data to be transmitted in the first 
transmission mode and the encryption key used for 
encrypting the data to be transmitted in the second 
transmission mode, on the basis of the information 35 
indicating the validity of the apparatus itself, the 
received random number and the generated ran- 
dom number, receives data P generated by the 
other information processing apparatus on the 
basis of the generated encryption key, the received 40 
random number and the generated random 
number, generates either one of the encryption key 
used for decoding the data transmitted in the first 
transmission mode and the encryption key used for 
decoding the data transmitted in the second trans- 45 
mission mode, on the basis of the information indi- 
cating the validity of the apparatus itself, the 
received random number and the generated ran- 
dom number, verifies whether or not data P* gener- 
ated on the basis of the generated encryption key, so 
the received random number and the generated 
random number is coincident with the received data 
R and in the case where the data P* is coincident 
with the data P, transmits data Q generated on the 
basis of the information indicating the validity of the 55 
apparatus itself, the received random number and 
the generated random number to the other informa- 
tion processing apparatus and generates the 



encryption key of the transmission mode for which 
the encryption key is not generated yet, of the 
encryption keys used for decoding the data trans- 
mitted in the first transmission mode and the sec- 
ond transmission mode, on the basis of the 
encryption key of the transmission mode for which 
the encryption key is already generated, the 
received random number and the generated ran- 
dom number. 

99. The information processing apparatus as claimed 
in claim 98, wherein the receiving control means 
generates two random numbers R1 and R2 and 
transmits them to the other information processing 
apparatus, receives two random numbers S1 and 
S2 generated by the other information processing 
apparatus, the other information processing appa- 
ratus generating one encryption key Kt of the 
encryption key used for encrypting the data to be 
transmitted in the first transmission mode and the 
encryption key used for encrypting the data to be 
transmitted in the second transmission mode on the 
basis of the information indicating the validity of the 
apparatus itself, the received random number R1 
and the generated random number SI, the receiv- 
ing control means receives data P generated on the 
basis of the generated encryption key K1, the 
received random number R2 and the generated 
random number S2, generates one encryption key 
KM of the encryption key used for decoding the data 
transmitted in the first transmission mode and the 
encryption key used for decoding the data transmit- 
ted in the second transmission mode on the basis 
of the information indicating the validity of the appa- 
ratus itself, the received random number St and the 
generated random number R1. verifies whether or 
not data P' generated on the basis of the generated 
encryption key K*1, the received random number 
S2 and the generated random number R2 is coinci- 
dent with the received data P, and in the case where 
the data P* is coincident with the data P, transmits 
data Q generated on the basis of the information 
indicating the validity of the apparatus itself, the 
received random number Si and the generated 
random number R1 to the other information 
processing apparatus and generates the encryp- 
tion key K'2 of the transmission mode for which the 
encryption key is not generated yet, of the encryp- 
tion keys used for decoding the data transmitted in 
the first transmission mode and the second trans- 
mission mode, on the basis of the encryption key 
K*1 of the transmission mode for which the encryp- 
tion key is already generated, the received random 
number S2 and the generated random number R2. 

10O.The information processing apparatus as claimed 
in claim 99, wherein the receiving control means 
generates the encryption key K'1 on the basis of the 
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result of calculation of a unidirectional function 
using the information indicating the validity of the 
apparatus itself, the received random number Si 
and the generated random number Rt f and gener- 
ates the encryption key K'2 on the basis of the 
result of calculation of a unidirectional function 
using the generated encryption key K'1. the 
received random number S2 and the generated 
random number R2. 

101.The information processing apparatus as claimed 
in claim 100, wherein the receiving control means 
receives data P generated by the other information 
processing apparatus on the basis of the result of 
calculation of the unidirectional function using the 
generated encryption key K1 , the received random 
number R2 and the generated random number S2 
verifies whether or not data P' generated on the 
basis of the result of calculation of the unidirectional 
function using the generated encryption key K'1 
the received random number S2 and the generated 
random number R2 is coincident with the received 
data R and in the case where the data P' is coinci- 
dent with the data R transmits data Q generated on 
the basis of the result of calculation of the unidirec- 
tional function using the information indicating the 
validity of the apparatus itself, the received random 
number Si and the generated random number R1 
to the other information processing apparatus. 

102. The information processing apparatus as claimed 
m claim 100, wherein the receiving control means 
generates the encryption key K'1 and the encryp- 
tion key K'2, using a bit value of a part of the result 
of calculation of the unidirectional function. 

103. The information processing apparatus as claimed 
m claim 102, wherein the receiving control means 
generates the data Q and the data P', using a bit 
value of a part of the result of calculation of the uni- 
directional function. 

104. The information processing apparatus as claimed 
m claim 102, wherein the receiving control means 
generates the encryption key K'1 and the encryp- 
tion key K'2, using the least significant n bits of the 
result of calculation of the unidirectional function. 

105. The information processing apparatus as claimed 
m claim 104, wherein the receiving control means 
generates the data Q and the data P\ using the 
most significant m bits of the result of calculation of 
the unidirectional function. 

106. The information processing apparatus as claimed 55 
m claim 99. wherein the receiving control means 
generates the encryption key K'1 on the basis of the 
result of calculation of a unidirectional function with 
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respect to concatenated data formed by concate- 
nating the information indicating the validity of the 
apparatus itself, the received random number S1 
and the generated random number Ri. and gener- 
ates the encryption key K'2 on the basis of the 
result of calculation of a unidirectional function with 
respect to concatenated data formed by concate- 
nating the generated encryption key K'1 the 
received random number S2 and the generated 
random number R2. 

107.The information processing apparatus as claimed 
m claim 106, wherein the receiving control means 
rece,ves data P generated by the other information 
processing apparatus on the basis of the result of 
calculation of the unidirectional function with 
respect to concatenated data formed by concate- 
nating the generated encryption key K1 the 
received random number R2 and the generated 
random number S2. verifies whether or not data P' 
generated on the basis of the result of calculation of 
the unidirectional function with respect to concate- 
nated data formed by concatenating the generated 
encryption key K'1, the received random number 
S2 and the generated random number R2 is coinci- 
dent with the received data P. and in the case where 
the data P* is coincident with the data R transmits 
data Q generated on the basis of the result of calcu- 
lation of the unidirectional function with respect to 
concatenated data formed by concatenating the 
information indicating the validity of the apparatus 
rtself, the received random number S1 and the gen- 
erated random number R1 to the other information 
processing apparatus. 
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